Linux kernel (drivers/iommu/intel): SVA bind and unbind are asymmetric on VT-d hardware without PCI/PRI - bind skips

CVSS 5.5CVE-2026-64591Kernel, userspace & hypervisorcurated

Impact

SVA bind and unbind are asymmetric on VT-d hardware without PCI/PRI - bind skips enabling I/O page faulting, unbind tries to disable it anyway. The unbind path hits a kernel WARNING every time a tenant closes an SVA-using GPU context, which on any node booted with panic_on_warn is an immediate node kill, and it leaves the device's IOPF enablement state out of step with reality.

Who can reach it

A tenant holding /dev/dri/renderD* on an Intel Xe GPU (the upstream report came from xe_vm_close_and_put) or any SVA-capable accelerator simply closes its GPU VM. Conditional on VT-d with SVA enabled and the device lacking PRI support. Repeatable at will from inside the container, with no host privilege.

What to do

Update to 6.18.39 / 6.20 or later. Interim: do not boot tenant nodes with panic_on_warn, which is what turns this from a log line into an outage, and disable SVA where the workload does not need it.

References

https://git.kernel.org/stable/c/bb354384f40bb087e7c44f0f0743a23fc945f91d https://git.kernel.org/stable/c/477f8dec3b5ae54e8ef3c33bdd2257e47896512e https://nvd.nist.gov/vuln/detail/CVE-2026-64591

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.