Context Entry Setup Regression in Linux Kernel: Impacting Apple Macbooks
Summary
DEBIAN-CVE-2025-38216: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 ("iommu/vt-d: Add support for static identity domain") changed the... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services for software applications. It supports a wide range of hardware architectures and is known for its stability and performance. However, a recent vulnerability has emerged that affects the context entry setup for PCI aliased devices, particularly impacting keyboard and touchpad functionality on certain Apple Macbook models.
Vulnerability Detail
In the Linux kernel, a vulnerability was introduced due to a change in the context entry setup during domain attachment for IOMMU (Input-Output Memory Management Unit) operations. The modification from a set-and-check policy to a clear-and-reset approach inadvertently caused a regression for PCI aliased devices behind PCIe-to-PCI bridges. This led to failures in keyboard and touchpad operations on several Apple Macbooks, resulting in error messages related to DMA read access issues. The root cause of the problem lies in the improper handling of context entries, which affects device communication and functionality.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users experiencing issues with keyboard and touchpad functionality can try using an external USB keyboard or mouse until the kernel is updated to the patched version.
Conclusion
The vulnerability in the Linux kernel related to context entry setup has significant implications for users of affected Apple Macbooks, particularly in terms of keyboard and touchpad functionality. Updating to the patched version of the kernel is crucial to mitigate this issue. Users are encouraged to monitor their systems and apply updates promptly.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a regression in the Linux kernel's context entry setup for IOMMU operations, affecting PCI aliased devices.
The vulnerability primarily affects keyboard and touchpad functionality on certain Apple Macbook models.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
As a temporary measure, consider using an external USB keyboard or mouse until you can apply the kernel update.
Detailed information about the vulnerability can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38216.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
