Memory Leak Vulnerability in Linux Kernel Affecting IOMMU Driver

CVE-2025-21770

Summary

A memory leak has been identified in the Linux kernel's IOMMU driver due to improper handling in the iopf_queue_remove_device() function. When this function is called with pending I/O page faults (iopfs) and with PRI disabled, it fails to adequately free the group structure associated with the outstanding iopfs. This oversight can lead to excess memory consumption, impacting system performance. The vulnerability has been mitigated by ensuring the iopf_free_group() function is called after processing the pending iops, effectively preventing memory leaks in affected systems.

References