In the Linux kernel’s iommu/vt‑d subsystem a flaw was discovered where the teardown logic accesses a NULL dev_pasid pointer or incorrectly decrements a reference count. A missing PASID can cause a null‑pointer dereference or corrupt the refcount, potentially triggering a use‑after‑free of the domain object. The result can be a kernel panic or other denial‑of‑service condition for all devices sharing that domain.

The flaw affects the Linux kernel, specifically any configuration that enables the iommu/vt‑d interface. No specific version range is listed by the CNA; the fix was applied by commit 60f030f7418d. Users of the affected kernel branch must ensure they run a version that includes this commit.

An exact CVSS score is not provided, and the EPSS score is not available, so the precise exploitation likelihood cannot be quantified from the current data. The vulnerability is a local kernel flaw that requires attacker control over the iommu/vt‑d subsystem to trigger the faulty teardown code. The KEV status indicates it is not currently listed as a known exploited vulnerability, but the absence of an EP guarantee that exploitation risk is low.