CVE-2026-90242

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iommu/vt-d component where replacing a domain that has an iopf handler with another domain at the RID level causes a reference leak in info->iopf refcount. This occurs because intel iommu attach device() and identity domain attach dev() enable IOPF for the new domain without disabling it for the old one. Consequently, the reference count never returns to zero, preventing iopf queue remove device() from being called and causing iommu disable pci pri() to trigger a warning when the device is released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.