In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 ("iommu/vt-d: Add support for static identity domain") changed the context entry setup during domain attachment from a set-and-check policy to a clear-and-reset approach. This inadvertently introduced a regression affecting PCI aliased devices behind PCIe-to-PCI bridges. Specifically, keyboard and touchpad stopped working on several Apple Macbooks with below messages: kernel: platform pxa2xx-spi.3: Adding to iommu group 20 kernel: input: Apple SPI Keyboard as /devices/pci0000:00/0000:00:1e.3/pxa2xx-spi.3/spimaster/spi2/spi-APP000D:00/input/input0 kernel: DMAR: DRHD: handling fault status reg 3 kernel: DMAR: [DMA Read NOPASID] Request device [00:1e.3] fault addr 0xffffa000 [fault reason 0x06] PTE Read access is not set kernel: DMAR: DRHD: handling fault status reg 3 kernel: DMAR: [DMA Read NOPASID] Request device [00:1e.3] fault addr 0xffffa000 [fault reason 0x06] PTE Read access is not set kernel: applespi spi-APP000D:00: Error writing to device: 01 0e 00 00 kernel: DMAR: DRHD: handling fault status reg 3 kernel: DMAR: [DMA Read NOPASID] Request device [00:1e.3] fault addr 0xffffa000 [fault reason 0x06] PTE Read access is not set kernel: DMAR: DRHD: handling fault status reg 3 kernel: applespi spi-APP000D:00: Error writing to device: 01 0e 00 00 Fix this by restoring the previous context setup order.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-headers-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-image-unsigned-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-image-unsigned-6.14.0-1007-oem-dbgsym", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-ipu6-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-ipu7-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-usbio-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-vision-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-oem-6.14-headers-6.14.0-1007", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-oem-6.14-tools-6.14.0-1007", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-tools-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-riscv-6.14-headers-6.14.0-24", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-riscv-6.14-tools-6.14.0-24", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "bpftool", "binary_version": "7.6.0+6.14.0-24.24" }, { "binary_name": "linux-bpf-dev", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-buildinfo-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-common", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-doc", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-64k-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-lib-rust-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-libc-dev", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-extra-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-ipu6-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-ipu7-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-usbio-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-vision-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-perf", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-source-6.14.0", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-common", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-host", "binary_version": "6.14.0-24.24" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-buildinfo-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-gcp-headers-6.14.0-1011", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-gcp-tools-6.14.0-1011", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-headers-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-headers-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-64k-dbgsym", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-dbgsym", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-extra-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-extra-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-tools-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-tools-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-headers-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-6.14.0-1009-raspi-dbgsym", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-raspi-headers-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-raspi-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-tools-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-cloud-tools-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-headers-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.14.0-1006-realtime-dbgsym", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-extra-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-cloud-tools-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-headers-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-tools-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-tools-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-riscv-headers-6.14.0-24", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-riscv-tools-6.14.0-24", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" } ] }