CVE-2023-54174

CVE-2023-54174 affects the Linux kernel vfio path: a NULL pointer dereference occurs when group->iommufd is uninitialized in iommufd_ctx_put(), leading to kernel crash via vfio_group_fops_unl_ioctl flow. The issue is caused by iommufd_ctx_put dereferencing an uninitialized group->iommufd, a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from uninitialized group-iommufd, which could lead to a null pointer dereference...

PT-2025-54003

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where a NULL pointer dereference can occur due to an uninitialized group-iommufd. This issue is present in the iommufd ctx put function and can be...

kernel: vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd

A NULL pointer dereference was found in the VFIO subsystem. When a VFIO group operation fails before group-iommufd is initialized, the cleanup path calls iommufdctxput with a NULL pointer, causing a kernel crash...