A vulnerability in the Linux kernel IOMMU subsystem allows a local authenticated attacker to trigger memory corruption and potential system compromise by leveraging stale context cache entries.

The Linux kernel IOMMU driver incorrectly handles context cache invalidation for DMA aliases, causing the hardware to reference memory that has already been freed. This requires local access with low privileges to trigger the race condition or teardown sequence.

Successful exploitation of this vulnerability can lead to unauthorized memory access, privilege escalation, or system instability. With a CVSS score of 8.8, this flaw is categorized as High severity because it allows a local attacker to bypass memory isolation boundaries, which can result in full system compromise.

Immediate Action: Update the Linux kernel to version 6.18.52, 7.2.6, or the latest available stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or IOMMU-related faults that may indicate an attempt to trigger this teardown flaw.

Compensating Controls: Limit access to the system to only trusted users, as the vulnerability requires local access to interact with the IOMMU subsystem.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to system integrity due to its impact on IOMMU memory isolation. System administrators should prioritize testing and deploying the provided kernel patches to their production environments immediately to prevent potential exploitation of the DMA alias teardown path.