Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
No PoCs from references.
- https://github.com/xairy/linux-kernel-exploitation