The vulnerability in the Linux kernel's vhost_iotlb subsystem involved improper enforcement of maximum entry limits in the vhost_iotlb_add_range_ctx() function. Specifically, non-retiring IOTLB tables could continue allocating entries after reaching their configured limit because the function only retired old entries when certain conditions were met. The patch corrects this by using the caller-provided limit for allocation, rejecting non-positive limits, and ensuring that full-range mappings are only inserted if both split entries can fit. Additionally, it reuses retired map nodes to prevent repeated memory allocations under high update loads. This resolves the risk of resource exhaustion and inconsistent IOTLB state due to unchecked entry allocation.

The vulnerability could allow vhost devices using IOTLB tables without proper entry retirement to allocate entries beyond their configured limits. This may lead to resource exhaustion or inconsistent internal state within the kernel's IOTLB management, potentially affecting system stability or performance. No known exploits in the wild have been reported. The impact is primarily on kernel resource management in virtualized environments using vhost devices.

A fix has been implemented in the Linux kernel to enforce proper limits on IOTLB entry allocation and to reject invalid configurations. Users should update to a kernel version that includes this patch once available. Since this is a kernel-level vulnerability, applying the official kernel update is the recommended remediation. No additional mitigations are indicated by the vendor advisory.