CVE-2025-71089 iommu: disable SVA when CONFIG_X86 is set

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Updates on CVE-2025-71089 and CVE-2024-26785 Vulnerabilities CVE-2025-71089, published on January 13, 2026, addresses an issue with iommu where SVA is disabled when CONFIG_X86 is set. CVE-2024-26785, published on April 4, 2024, fixes a protection fault in the iommufd test related to IOVA conversion. Both vulnerabilities are significant for systems utilizing these configurations. 3 sources 47