A high-severity use-after-free vulnerability in the Linux kernel IOMMU subsystem could allow a privileged attacker to achieve system compromise or denial of service.

The vulnerability exists in the intel_iommu_probe_device function, where failure to properly tear down scalable-mode context entries during a probe failure leaves references to freed memory. This requires high-privileged access to the local system to trigger the specific PCI device probe error path.

The vulnerability carries a CVSS score of 8.2, reflecting a significant risk to system integrity and availability. Successful exploitation could allow an attacker with high privileges to execute code with kernel-level permissions, leading to full system compromise or a kernel panic, resulting in service outages.

Immediate Action: Update the Linux kernel to version 6.12.110, 6.18.52, 7.2.6, or a later stable release where this fix has been backported.

Proactive Monitoring: Monitor system logs for IOMMU-related errors or kernel oops messages that indicate unexpected device probe failures.

Compensating Controls: Restrict access to physical hardware and PCI device management interfaces to users with the absolute minimum required privileges to reduce the attack surface.

Public Exploit Available: Unknown

Given the potential for kernel-level impact, administrators should prioritize applying the provided kernel updates across all affected systems. Ensure that testing is conducted in a staging environment to verify stability after the kernel upgrade, particularly for systems utilizing Intel VT-d technologies.