The Linux kernel vulnerability involved the RISC-V IOMMU subsystem failing to perform required TLB and context cache invalidations (IOTINVAL) after updating Device Directory Table (DDT) or Page Directory Table (PDT) entries. This omission violated the RISC-V IOMMU specification sections 6.3.1 and 6.3.2, potentially leading to stale or inconsistent memory mappings. The issue was resolved by adding the riscv_iommu_iodir_iotinval() function to enforce these invalidations, ensuring compliance with the specification and preventing potential security risks related to memory management.

The vulnerability could allow an attacker with limited privileges (local access with low privileges) to cause significant confidentiality, integrity, and availability impacts on affected systems due to improper invalidation of memory mappings in the RISC-V IOMMU. This could lead to unauthorized memory access or corruption. However, there are no known exploits in the wild at this time.

A fix is available in Linux kernel versions 7.0.0-28.28.1 and later for the linux-hwe-edge product. Users should update to these or later versions to remediate the vulnerability. No additional mitigation steps are indicated beyond applying the official patch.