The Linux kernel AMD IOMMU debugfs code used kstrtou32_from_user() to parse user input into int variables dbg_mmio_offset and dbg_cap_offset. This mismatch could cause large unsigned inputs to be interpreted as negative signed integers, potentially leading to out-of-bounds memory access in iommu_mmio_write() and iommu_capability_write(). Prior protections limited input size and checked bounds, but this latent issue was fixed by replacing kstrtou32_from_user() with kstrtos32_from_user() and adding explicit negative value checks to prevent out-of-bounds access.

If exploited, this vulnerability could allow a user with access to the AMD IOMMU debugfs interface to cause out-of-bounds memory access, which might lead to system instability or information disclosure. However, the implementation was already protected by input size limits and bounds checks, reducing the risk. No known exploits in the wild have been reported.

This vulnerability has been resolved in the Linux kernel by updating the input parsing and adding explicit checks to prevent negative offsets. Users should apply the official kernel patches that include this fix. Since this is a kernel vulnerability, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories or distribution security updates for the exact fixed versions and apply them accordingly.