diff --git a/pkg/debian/kernel/ubuntu.config b/pkg/debian/kernel/ubuntu.config
index 8995f4701..17590645b 100644
--- a/pkg/debian/kernel/ubuntu.config
+++ b/pkg/debian/kernel/ubuntu.config
@@ -56,3 +56,9 @@ CONFIG_ACPI_I2C_OPREGION=y
 ##
 
 # CONFIG_INPUT_EVBUG is not set
+
+##
+## Do not enable Intel IOMMU by default, it breaks IPTS/ME.
+##
+
+CONFIG_INTEL_IOMMU_DEFAULT_ON=n