In the Linux kernel, a RISC‑V IOMMU flaw causes the software producer to advance the command queue state before the command is written and the hardware tail pointer is updated. This mismatched synchronization can lead to the hardware acting on incomplete or stale data, potentially disrupting device memory mapping and resulting in a denial of service or corrupted I/O operations.

The vulnerability is present in the RISC‑V target of the Linux kernel. Because no version range is supplied, any kernel that includes the unpatched RISC‑V IOMMU code may be affected. Linux distributions for RISC‑V platforms should verify that their kernel contains the fix associated with commit 6d4c12a or an equivalent mainline update.

The advisory provides no CVSS or EPSS score and does not appear in the CISA KEV catalog, so there is no evidence of documented exploits. Given that the issue depends on unsynchronized command queue handling, an attacker would need to induce the kernel to process unsynchronized commands, which is theoretically possible but not known to be practicable. Therefore, the risk is considered moderate, primarily relevant to systems heavily utilizing IOMMU functionality.