CVE-2025-21876

A flaw was found in the Linux kernel's IOMMU (Input/Output Memory Management Unit) subsystem. A local attacker could potentially trigger a kernel warning related to improper locking mechanisms when handling IOMMU fault interrupts. This issue could lead to a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, the intel_iommu kernel module can be prevented from loading. This may impact systems utilizing Intel VT-d for device passthrough or other IOMMU-dependent features.

Create a file /etc/modprobe.d/disable-intel-iommu.conf with the following content:

blacklist intel_iommu
install intel_iommu /bin/true

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect.

dracut -f -v
reboot

Warning: Disabling the intel_iommu module may affect system functionality, especially in virtualized environments or when using hardware requiring IOMMU.