CVE-2023-53795

The CVE-2023-53795 issue in the Linux kernel concerns a race where IOMMUFD_DESTROY would incorrectly increment an object’s refcount, potentially causing spurious failures during destruction when combined with iommufd_object_destroy_user. Public advisories confirm a fix that avoids any refcount in...

kernel: iommufd: IOMMUFD_DESTROY should not increase the refcount

A race condition was identified in the iommufd subsystem of the Linux kernel where the IOMMUFDDESTROY command incorrectly increments an object’s reference count without holding the expected exclusive synchronization destroyrwsem. This violates the assumption that temporary reference count...