A bug in the Linux kernel's IOMMU subsystem causes unbalanced handling of an unmap error when the debug mode is active. On the error path, iommu_unmap() invokes trace functions that expect a prior map entry, but because the map was never established this leads to unmatched tracing and faulty resource bookkeeping. The flaw falls under CWE-832: Improper Resource Management and can corrupt kernel state or trigger a kernel panic, resulting in a denial of service for the affected system.

All Linux kernel releases that contain the IOMMU debug path are potentially affected, as the issue resides in the core iommu code without documented version constraints. The kernel versions indicated by the CPE entries, including generic and release candidates such as 7.1 rc1-rc3, are part of the affected set. The vulnerability is present in any kernel configured with iommu_debug enabled.

The CVSS score of 7.8 indicates a high severity vulnerability, while the EPSS score of less than 1% shows low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The available information does not describe a remote attack vector; the needed conditions for exploitation, such as triggering an IOMMU map failure while debug mode is enabled or having the capability to modify kernel state, suggest that an attacker would need privileged access or the ability to influence kernel execution. These conditions are therefore inferred from the description rather than explicitly documented in the CVE record.