CVE-2022-48916

A flaw was found in the Linux kernel's Intel IOMMU (Input-Output Memory Management Unit) driver. When enabling Intel Volume Management Device (VMD) in scalable mode, an initialization error fails to properly clean up device information tables. This failure leads to a duplicate list insertion during subsequent device registration, triggering a kernel panic. A local user could exploit this flaw to crash the system, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because successful exploitation requires specific platform hardware configurations and results in a local denial of service through a system crash without compromising confidentiality or integrity. The issue only manifests on systems equipped with Intel Volume Management Device (VMD) controllers operating under IOMMU scalable mode during device initialization. Typical enterprise deployments not employing VMD NVMe aggregation or scalable mode are not exposed to this failure condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.