Linux Kernel IOMMU MSI Message Address Handling Vulnerability Allowing Use-After-Free

A vulnerability in the Linux kernel's handling of IOMMU translation for MSI message addresses can lead to a use-after-free condition. This issue arises because the process of storing and using IOVA addresses for MSI interrupts is not properly synchronized, allowing potential races that can be exploited. The vulnerability is present in the kernel's interrupt handling when using the iommufd interface, which permits changes to the IOMMU domain during VFIO operations, creating a window for exploitation.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary memory access or manipulation.