@hugovalters.bsky.socialAudit GPU passthrough with IOMMU group and ACS checks. Script maps /sys/kernel/iommu_groups, detects pcie_acs_override, flags shared bridges. Validated on Proxmox 8 and https://www.valtersit.com/vault/audit-gpu-passthrough-security-with-iommu-group-and-acs-chec-dfda6e/
#iommu #security #ValtersIT
@hugovalters.bsky.socialCheck IOMMU groups before GPU passthrough. This script maps every PCI device to its group and flags NVIDIA GPUs sharing with HDMI audio or bridges that break clean passthrough. https://www.valtersit.com/vault/discover-iommu-groups-and-confirm-gpu-isolation-before-passt-b32a88/ #iommu #pci #nvidia
@kerneldispatch.bsky.socialPowerPC KVM fixes address use-after-free, secure-page leak, and TCE overflow
Three targeted patches harden PowerPC KVM and IOMMU paths.
@kerneldispatch.bsky.social