An IOMMU configuration error in the Linux kernel could allow a local attacker with low privileges to trigger memory corruption or unauthorized access.

The vulnerability exists in the iommupt driver due to a failure to validate PAGE_SIZE within the pgsize_bitmap. An authenticated local attacker with low privileges could exploit this to manipulate memory mappings, leading to significant system compromise.

The potential for unauthorized memory access or corruption poses a severe threat to data confidentiality and integrity. With a CVSS score of 8.4, this vulnerability is considered high risk, as it allows for privilege escalation or cross-domain memory access in virtualized or containerized environments.

Immediate Action: Update the Linux kernel to version 7.0.11 or later to incorporate the necessary validation checks.

Proactive Monitoring: Implement kernel auditing to detect unusual memory mapping requests or unauthorized attempts to manipulate IOMMU settings.

Compensating Controls: Utilize hardware-based security features, such as Intel VT-d or AMD-Vi, and enforce strict container isolation policies to limit the scope of impact.

Public Exploit Available: Unknown

Due to the potential for privilege escalation and memory corruption, this update is critical. Organizations should verify their kernel versions and apply the recommended patches immediately to maintain the security posture of their infrastructure.