292 matches found
CVE-2024-26785
CVE-2024-26785 (Linux kernel) fixed a protection fault in iommufd_test_syz_conv_iova due to iommufd_access_change_ioas() setting access->ioas to NULL, creating a race where the lock could be invalid concurrently. The fix aligns with existing sanity checks in iommufd_access_rw() and iommufd_acc...
CVE-2024-26786
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix ioptaccesslistid overwrite bug Syzkaller reported the following WARNON: WARNING: CPU: 1 PID: 4738 at drivers/iommu/iommufd/iopagetable.c:1360 Call Trace: iommufdaccesschangeioas+0x2fe/0x4e0...
Unbreakable Enterprise kernel security update
5.15.0-204.147.6.2 - smb3: Replace smb2pdu 1-element arrays with flex-arrays Kees Cook Orabug: 36353543 - hvnetvsc: Register VF in netvscprobe if NETDEVICEREGISTER missed Shradha Gupta Orabug: 36358874 - hvnetvsc: Fix race condition between netvscprobe and netvscremove Souradeep Chakrabarti -...
kernel: iommufd: Check for uptr overflow
A flaw was found in the iommufd subsystem of the Linux kernel. When setting up a mapping with a user virtual address that wraps past zero or otherwise triggers a pointer/size overflow, the kernel may fail to properly validate and constrain the user-provided values. This can result in a buffer...
kernel: vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd
A NULL pointer dereference was found in the VFIO subsystem. When a VFIO group operation fails before group-iommufd is initialized, the cleanup path calls iommufdctxput with a NULL pointer, causing a kernel crash...
kernel: Kernel (iommufd): Information Disclosure via uninitialized memory padding
A flaw was found in the kernel. A local attacker could exploit this by triggering a missing zero initialization in the iommufd component when copying vfioiommutype1info to user space. This could lead to the disclosure of sensitive information from uninitialized memory padding...
CVE-2023-33250
The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...
UBUNTU-CVE-2023-33250
The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...
CVE-2023-33250
The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...
CVE-2023-33250
CVE-2023-33250 affects the Linux kernel 6.3, with a use-after-free in the iommufd IO page table path: iopt_unmap_iova_range (drivers/iommu/iommufd/io_pagetable.c). The root cause is use-after-free, leading to a potential availability impact. The NVD/CVE entry lists a MEDIUM base score (4.4) via C...
PT-2024-15212 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a use-after-free UAF error during the iommufd put object function call. Recommendations: At the moment, there is no information about a newer version that...
