437 matches found
PT-2024-9842
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the iommufd access change ioas function in the Linux kernel, which sets access-ioas to NULL during its process, potentially causing a lock to be gone in a...
PT-2024-7741
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an overwrite of access-iopt access list id in the iopt add access function, which is called from iommufd access change ioas when xa alloc succeeds but iopt...
kernel: Kernel (iommufd): Information Disclosure via uninitialized memory padding
A flaw was found in the kernel. A local attacker could exploit this by triggering a missing zero initialization in the iommufd component when copying vfioiommutype1info to user space. This could lead to the disclosure of sensitive information from uninitialized memory padding...
kernel: iommufd: Check for uptr overflow
A flaw was found in the iommufd subsystem of the Linux kernel. When setting up a mapping with a user virtual address that wraps past zero or otherwise triggers a pointer/size overflow, the kernel may fail to properly validate and constrain the user-provided values. This can result in a buffer...
kernel: vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd
A NULL pointer dereference was found in the VFIO subsystem. When a VFIO group operation fails before group-iommufd is initialized, the cleanup path calls iommufdctxput with a NULL pointer, causing a kernel crash...
PT-2023-9694
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of memory after it has been freed in the iopt area split function of the iommufd component, due to incorrect control of resource identifiers. This can all...
CVE-2023-33250
The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...
UBUNTU-CVE-2023-33250
The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...
CVE-2023-33250
The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...
CVE-2023-33250
CVE-2023-33250 affects the Linux kernel 6.3, with a use-after-free in the iommufd IO page table path: iopt_unmap_iova_range (drivers/iommu/iommufd/io_pagetable.c). The root cause is use-after-free, leading to a potential availability impact. The NVD/CVE entry lists a MEDIUM base score (4.4) via C...
PT-2023-2853
Name of the Vulnerable Software and Affected Versions Linux kernel version 6.3 Description The issue is related to a use-after-free in the iopt unmap iova range function in the drivers/iommu/iommufd/io pagetable.c module of the Linux kernel. This could allow an attacker to cause a denial of servi...
CVE-2023-33250: Use After Free
The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...
PT-2023-36796
Уязвимость функции iopt area unpin domain модуля drivers/iommu/iommufd/pages.c драйвера IOMMU ядра операционной системы Linux связана с раскрытием конфиденциальной информации. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...
PT-2025-37677
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc2-eeac8ede1755+ Description A flaw exists in the Linux kernel's iommufd subsystem related to page frame number pfn list corruption during batch carry operations. Specifically, if batch-end is 0, setting...
PT-2025-41074
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc2-eeac8ede1755 Description A flaw exists in the Linux kernel's iommufd subsystem related to the unpinning of pages when an access is present. Specifically, an incorrect calculation of batch last index can...
PT-2024-15212
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to a use-after-free UAF error during the iommufd put object function call. Recommendations At the moment, there is no information about a newer version that contains...
