CVE-2026-90240

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iommu/vt-d component where the context cache is not flushed with the correct source ID (SID) when tearing down DMA aliases. The functions domain context clear one() and device pasid table teardown() use the requester ID of the device instead of the specific alias ID when calling intel context flush no pasid(). This results in stale entries remaining in the context cache for aliases other than the device's own RID. In scalable-mode teardown, intel pasid free table() may free a PASID directory still referenced by a stale entry, potentially allowing the IOMMU to access freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.