The Intel IOMMU driver in the Linux kernel allowed SVA on devices lacking PCI/PRI support by skipping IOPF enablement during the bind path but failed to update the unbind path accordingly. This caused the unbind path to attempt disabling IOPF for devices where it was never enabled, triggering a kernel WARNING. The fix ensures that IOPF operations are bypassed for SVA domains on non-PRI hardware in both bind and unbind paths, eliminating the warning and correcting the imbalance. This vulnerability affects multiple Linux HWE kernel versions prior to 7.0.0-31.31 and related versions, and a patch is available from Ubuntu security advisories.

The vulnerability causes a kernel warning due to an imbalance in IOPF handling in the Intel IOMMU driver, which may affect system stability or reliability. There is no indication from the advisory that this leads to privilege escalation, data corruption, or remote compromise. The impact is therefore limited to potential kernel warnings and related operational issues.

A patch is available and should be applied by updating to the fixed Linux kernel versions as specified in the Ubuntu security advisories USN-8726-1 and USN-8727-1. After updating, a system reboot is required. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary. No additional mitigation actions are indicated by the vendor.