The vulnerability arises when the Linux kernel tears down an Intel VT‑d PASID table entry by zeroing the entire 64‑byte structure while the entry is still active (Present bit set). Because the IOMMU hardware may fetch the entry through multiple internal bursts, writing to the memory while it is being read can produce a torn or partially updated view. This inconsistency can trigger hardware mis‑behaviour, spurious faults, or unpredictable device operation, essentially a race‑condition problem (CWE‑362).

All Linux kernel builds that include VT‑d support and have not applied the recent fix. The affected vendor is Linux itself; the vendor product is the Linux kernel. No specific version list is provided in the advisory, indicating that the issue existed in the kernel until the patch was merged.

No CVSS score is supplied, and the EPSS metric is unavailable; the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is a low‑privilege or privileged local attacker who can trigger the vulnerable IOMMU teardown sequence, for example by manipulating devices or submitting I/O requests that cause a PASID entry to be torn down. The impact is a possible denial of service or device corruption, but no known exploit has been made publicly available, suggesting a moderate to high risk conditioned on the presence of the vulnerable code path.