Linux Kernel Vulnerability Affecting IOMMU Functionality

CVE-2025-37877

Summary

A vulnerability has been identified in the Linux kernel that affects the handling of Input/Output Memory Management Units (IOMMU). When the function iommu_device_register() encounters an error, it can improperly manage the teardown of configured groups and default domains. This may result in devices still being linked to iommu-dma, despite the dysfunction of the IOMMU driver. The lack of proper cleanup could lead to system instability, such as crashes within the iommu-dma operations. Enhancements have been proposed to ensure that the dev->dma_iommu flag and related configurations are thoroughly reset, maintaining system integrity.

References