This is a neat paper on PCIe attacks and mitigations.
Though that paper mentions a mitigation of using intel_iommu=strict rather than =on which disables batch revocation and instead enables synchronous revocation, but I seem to recall there being some odd vulnerabilities made possible by doing this, according to some paper on GPU-based DMA attacks over PCIe. Of course, the above-linked paper is only someone's thesis...
