The vulnerability concerns the Linux DMA API’s requirement that dma_free_attrs receive the exact dma_handle originally returned by the allocation function; altering the handle causes the kernel to misfree or corrupt memory. This can lead to kernel crashes or resource exhaustion, effectively denying service or potentially compromising kernel integrity.

All versions of the Linux kernel that include the unpatched DMA handling code are potentially affected. The vulnerability applies to mainstream distributions shipping the kernel with this issue, though no specific release numbers are provided.

The risk is high because a mismanaged DMA handle can trigger kernel-level memory corruption and crashes, impacting availability and possibly confidentiality or integrity if the resulting crash permits privilege escalation. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, suggesting limited public exploitation. The likely attack vector involves a malicious or compromised kernel module that incorrectly handles DMA addresses, requiring kernel‑level privileges or module loading rights.