The Linux kernel's iommu_call_iopf_notifier() function increments the reference count of a PCI device when looking up the requester via pci_get_domain_bus_and_slot(). However, it does not decrement this reference count after handling PPR faults, either on success or abort paths, resulting in a PCI device reference leak. This vulnerability is analogous to a prior fix for the iommu_v2 ppr_notifier() path. The patch corrects this by dropping the PCI device reference after handling the PPR entry, preventing resource exhaustion due to leaked references.

The vulnerability causes a leak of PCI device references in the kernel, which could lead to resource exhaustion over time. While this does not directly enable code execution or privilege escalation, the leak could degrade system stability or cause denial of service conditions if the system runs out of device references.

A fix has been implemented to drop the PCI device reference after handling PPR faults in iommu_call_iopf_notifier(). Users should apply the official Linux kernel patch that addresses this reference count leak. Since this is a kernel-level resource management issue, updating to a kernel version that includes this fix is the recommended remediation.