CVE-2025-21770

Summary

CVE-2025-21770 is a vulnerability affecting the Linux kernel. In the function iommu's iopf_queue_remove_device(), a potential memory leak has been identified. This function is responsible for removing a device from the per-iommu iopf queue when PRI is disabled. Upon removal, it responds to all outstanding iopfs with an IOMMU_PAGE_RESP_INVALID code and detaches the device from the queue. However, the function fails to release the group structure that represents a group of iopfs awaiting a response. This oversight can result in a memory leak if iopf_queue_remove_device() is invoked with pending iopfs. The issue has been rectified by adding a call to iopf_free_group() after the iopf group is responded to.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.