Linux Kernel IOMMU Unmapping Invalidation Vulnerability

Vulnerability

A vulnerability in the Linux kernel's IOMMU unmapping process can lead to incomplete invalidation of memory mappings. This issue arises when the unmap operation exceeds the requested range, particularly within large or contiguous I/O page table entries. The flaw was introduced because the invalidation process only cleared the specified unmap range, failing to address the additional area that may have been inadvertently unmapped. As a result, certain conditions could create a scenario where the unmap operation does not function as intended, although this is not believed to be a commonly exploitable issue.

Impact

The vulnerability can cause improper handling of memory unmapping, potentially leading to stale or incorrect mappings being retained when they should have been cleared. This could disrupt memory management and I/O operations, particularly in environments relying on precise control of memory mappings, such as virtualized systems or those using direct memory access (DMA).

Added: May 1, 2026, 4:53 PM
Updated: May 1, 2026, 4:53 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
7.7
relevance
7.2
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.