This vulnerability involves the IOMMU page table driver in the Linux kernel, where the driver may omit the PAGE_SIZE bit from the pgsize_bitmap. The missing check is technically permissible but contradicts the intended design, and an iommu_domain lacking this bit could lead to incorrect DMA mapping or other kernel behaviors. The flaw does not currently affect the DMA API, but the omission could create a path for privilege escalation or denial of service by a malicious kernel module or firmware that takes advantage of the improper page size configuration.

The affected product is the Linux kernel across all releases that contain the iommupt code path. No specific version is listed, so any kernel build including the vulnerable code may be impacted. The vulnerability applies to Linux kernel software maintained by the Linux Foundation.

The CVSS score of 8.4 indicates high impact and complexity. The EPSS score of < 1% suggests low current exploitation likelihood. The vulnerability is not listed in CISA KEV. An attacker would need kernel write privileges, likely through a malicious device driver or firmware, to exploit the missing PAGE_SIZE flag. Once triggered, the incorrect DMA mapping could allow code execution with elevated privileges or destabilize kernel memory, leading to denial of service.