Memory Leak Vulnerability in Linux Kernel Affecting IOMMU Driver
CVE-2025-21770

5.5MEDIUM

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
27 February 2025

What is CVE-2025-21770?

A memory leak has been identified in the Linux kernel's IOMMU driver due to improper handling in the iopf_queue_remove_device() function. When this function is called with pending I/O page faults (iopfs) and with PRI disabled, it fails to adequately free the group structure associated with the outstanding iopfs. This oversight can lead to excess memory consumption, impacting system performance. The vulnerability has been mitigated by ensuring the iopf_free_group() function is called after processing the pending iops, effectively preventing memory leaks in affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Linux 19911232713573a2ebea84a25bd4d71d024ed86b

Linux 19911232713573a2ebea84a25bd4d71d024ed86b < 90d5429cd2921ca2714684ed525898d431bb9283

Linux 19911232713573a2ebea84a25bd4d71d024ed86b < 9759ae2cee7cd42b95f1c48aa3749bd02b5ddb08

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.