CVE Database
/

CVE-2025-21770

Back to search

CVE-2025-21770

Published: Feb 27, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential memory leak in iopf_queue_remove_device() The iopf_queue_remove_device() helper removes a device from the per-iommu iopf queue when PRI is disabled on the device. It responds to all outstanding iopf's with an IOMMU_PAGE_RESP_INVALID code and detaches the device from the queue. However, it fails to release the group structure that represents a group of iopf's awaiting for a response after responding to the hardware. This can cause a memory leak if iopf_queue_remove_device() is called with pending iopf's. Fix it by calling iopf_free_group() after the iopf group is responded.

VendorProductVersions

Linux

Linux

affected
19911232713573a2ebea84a25bd4d71d024ed86b - < db60d2d896a17decd58d143eef92cf22eb0a0176
affected
19911232713573a2ebea84a25bd4d71d024ed86b - < 90d5429cd2921ca2714684ed525898d431bb9283
affected
19911232713573a2ebea84a25bd4d71d024ed86b - < 9759ae2cee7cd42b95f1c48aa3749bd02b5ddb08

Linux

Linux

affected
6.9
unaffected
0 - < 6.9
unaffected
6.12.16 - <= 6.12.*
unaffected
6.13.4 - <= 6.13.*
unaffected
6.14 - <= *

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now