Linux Kernel MMIO Range Mismanagement Vulnerability in PowerPC pSeries IOMMU

Vulnerability

A vulnerability exists in the Linux kernel's PowerPC pSeries IOMMU implementation, where the IOMMU fails to properly reserve memory-mapped input/output (MMIO) pages that overlap with the Dynamic DMA Window (DDW) range, particularly in 32-bit addressing. This mismanagement causes the Logical Partition (LPAR) to encounter a kernel panic during boot, as the IOMMU incorrectly maps Direct Memory Access (DMA) buffers into the unreserved MMIO range.

Impact

The vulnerability leads to a kernel panic in the affected LPAR, caused by improper handling of memory access, specifically a segmentation fault due to accessing an invalid memory area.

Reproduction

The vulnerability can be reproduced on a PowerPC pSeries system running the affected Linux kernel version. During the boot process, the IOMMU incorrectly maps DMA buffers into the MMIO range that overlaps with the Dynamic DMA Window, causing the kernel to OOPS and the system to fail to boot properly.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.