A bug in the Linux kernel’s IOMMU subsystem causes unbalanced handling of an unmap error when the debug mode is active. On the error path, a routine that begins and ends an IOMMU debug unmap trace is invoked, but no corresponding debug map has been created, creating a trace of unmatched mapping. This mis‑tracking reflects CWE‑832: Improper Resource Management and can corrupt kernel state or trigger a crash, potentially resulting in a denial of service.

All versions of the Linux kernel are potentially affected, as the flaw resides in the core IOMMU code path with no version constraints documented.

The vulnerability carries a CVSS score of 7.8 and an EPSS score of less than 1%, indicating high severity but a low likelihood of exploitation. It is not listed in the CISA KEV catalog, so no known exploits have been reported. The likely attack vector would require an attacker with kernel modification capabilities or the ability to induce an IOMMU map failure while the debug mode is enabled, which is not a typical remote exploitation scenario.