CVE-2022-48916: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48916 is a vulnerability in the Linux kernel related to the IOMMU/VT-d subsystem. The issue was discovered in the way the kernel handles PASID table allocation when enabling VMD (Volume Management Device) in scalable mode. This vulnerability affects Linux kernel versions from 5.12.19 through 5.17-rc6 (NVD).

The vulnerability occurs due to a double list_add operation when enabling VMD in scalable mode. The issue manifests when configuring PASID entries for VMD subdevices, where a failure in setup leads to improper handling of device_domain_info structures. The bug is triggered specifically during the IOMMU device attachment process for VMD subdevices, resulting in a kernel panic. The CVSS v3.1 base score is 5.5 (Medium) with vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD, Kernel Patch).

When exploited, this vulnerability can cause a kernel panic, leading to a system crash. This primarily affects systems using Intel VMD (Volume Management Device) with IOMMU in scalable mode, particularly on platforms like Eagle Stream with Sapphire Rapids CPUs (Kernel Patch).

The vulnerability requires local access and can be triggered during the system boot process when VMD and IOMMU scalable mode are enabled. It specifically affects configurations where VMD subdevices are being initialized with IOMMU support (NVD).

The issue has been fixed by preventing PASID table allocation for VMD subdevices. The fix modifies the condition for PASID table allocation by checking if the device is a real DMA subdevice before allocation. The patch has been integrated into the Linux kernel, and affected systems should be updated to a patched version (Kernel Patch).