[git pull] IOMMU Fixes for Linux v7.1-rc3
From: Joerg Roedel
Date: Fri May 15 2026 - 14:23:19 EST
Hi Linus,
This is probably the largest fixes pull-request ever sent for IOMMU. I
partially blame it to AI code review which found some issues but there is also
some rework in here to fix issues in the iommu parts of PCI device reset. I
hope that is okay, if not I can send a smaller PR, just let me know.
With that said:
The following changes since commit 5d6919055dec134de3c40167a490f33c74c12581:
Linux 7.1-rc3 (2026-05-10 14:08:09 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux.git tags/iommu-fixes-v7.1-rc3
for you to fetch changes up to 1bb54043ff309795c90ccadd8a6e6b13ac40ec4e:
MAINTAINERS: update Tomasz Jeznach's email address (2026-05-15 07:30:28 +0200)
----------------------------------------------------------------
IOMMU Fixes for Linux v7.1-rc3:
Including:
- AMD-Vi:
- Add bounds checks to debugfs and table lookups
- Intel VT-d:
- Apply an existing quirk for Q35 graphic device.
- Skip dev_pasid teardown for the blocked domain to avoid out-of-bounds
access.
- Return early if dev_pasid is missing to prevent NULL dereference or
UAF.
- Core:
- Fix bugs and corner cases in the pci_dev_reset_iommu_prepare/done()
code. This are some bigger changes including some re-work,
hopefully okay for -rc.
- Fix various issues found by AI in iommupt code.
- MAINTAINERS email address update for RISCV IOMMU.
----------------------------------------------------------------
Eder Zulian (1):
iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs
Jason Gunthorpe (5):
iommu: Fix loss of errno on map failure for classic ops
iommu: Fix up map/unmap debugging for iommupt domains
iommu: Handle unmap error when iommu_debug is enabled
iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap
iommupt: Fix the end_index calculation in __map_range_leaf()
Jose Fernandez (Anthropic) (1):
iommu/amd: Bounds-check devid in __rlookup_amd_iommu()
Naval Alcalá (1):
iommu/vt-d: Disable DMAR for Intel Q35 IGFX
Nicolin Chen (8):
iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()
iommu: Fix kdocs of pci_dev_reset_iommu_done()
iommu: Replace per-group resetting_domain with per-gdev blocked flag
iommu: Fix pasid attach in pci_dev_reset_iommu_prepare/done()
iommu: Fix nested pci_dev_reset_iommu_prepare/done()
iommu: Fix ATS invalidation timeouts during __iommu_remove_group_pasid()
iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset
iommu: Warn on premature unblock during DMA aliased sibling reset
Tomasz Jeznach (1):
MAINTAINERS: update Tomasz Jeznach's email address
Zhenzhong Duan (2):
iommu/vt-d: Fix oops due to out of scope access
iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
.mailmap | 1 +
MAINTAINERS | 2 +-
drivers/iommu/amd/debugfs.c | 9 +-
drivers/iommu/amd/iommu.c | 8 +-
drivers/iommu/generic_pt/iommu_pt.h | 24 +--
drivers/iommu/intel/iommu.c | 16 +-
drivers/iommu/iommu.c | 305 +++++++++++++++++++++++++-----------
7 files changed, 255 insertions(+), 110 deletions(-)
Please pull.
Thanks,
Joerg