Linux Kernel IOMMU Clock Management Vulnerability in Mediatek Platforms

Vulnerability

A vulnerability related to improper clock management has been identified in the Linux kernel's IOMMU implementation for Mediatek platforms. After a recent commit, the IOMMU clock is now managed by runtime callbacks, but the removal process still attempted to disable the clock manually. This discrepancy can lead to warnings about the IOMMU being already disabled, indicating a potential issue with the driver's handling of clock states.

Impact

The vulnerability can cause runtime warnings about improper clock management, which may indicate deeper issues with the driver's functionality or resource management.

Reproduction

The vulnerability can be reproduced by unbinding the IOMMU driver from a device using the sysfs interface. This action will trigger a warning if the driver improperly attempts to disable a clock that is already off, highlighting the mismanagement of clock states.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.7
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.