Linux Kernel IOMMU Resource Leak Vulnerability in Freescale PAMU Driver

Vulnerability

A resource leak vulnerability has been identified in the Linux kernel's Freescale PAMU IOMMU driver. The issue arises in the 'fsl_pamu_probe()' function, which fails to release interrupts and memory resources when the 'create_csd()' function encounters an error. This vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can lead to a resource leak, where memory and interrupt resources are not properly released, potentially causing resource exhaustion or other unintended side effects.

Reproduction

The vulnerability can be reproduced by loading the Freescale PAMU IOMMU driver in a Linux kernel version that is affected by this vulnerability. When the 'fsl_pamu_probe()' function is executed, it will call 'create_csd()' with parameters that can trigger an error. If 'create_csd()' fails, 'fsl_pamu_probe()' will return immediately without releasing the allocated resources, creating a resource leak.

Remediation

Users can upgrade to a patched version of the Linux kernel where this vulnerability has been addressed. The specific commit that fixes this vulnerability is available in the Linux kernel stable tree.

Added: Oct 7, 2025, 6:32 PM
Updated: Oct 7, 2025, 6:32 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.7
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.