Linux kernel (drivers/iommu/intel): VT-d walked the PCI DMA-alias list for devices that are not PCI at all while

Impact

VT-d walked the PCI DMA-alias list for devices that are not PCI at all while clearing a domain's context entries, operating on the wrong structure. Upstream reports kernel hangs; the isolation consequence is that context-entry teardown on detach does not do what it was meant to, which is how stale translations survive a device being detached from its domain.

Who can reach it

Reached on domain detach and device release for non-PCI (ACPI namespace or platform) devices behind Intel VT-d. This is host-side device lifecycle, not a tenant ioctl - but it runs on the same detach path that is supposed to revoke a departing tenant's DMA access. The vendor scores it 7.8 with full confidentiality, integrity and availability impact.

What to do

Update to 5.15.169, 6.1.114, or 6.6.58 or later. No practical interim control - the path runs whenever a non-PCI device behind VT-d is detached.

References