PT-2026-85658

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description A NULL pointer dereference occurs in the iommufd ioas change process function when it runs concurrently with iopt map file pages. The iopt map pages function operates in two phases: it first...

Linux iommufd Heap Buffer Overflow

The vulnerability of the ioptareasplit function in the iommufd component of Linux operating systems is related to the use of memory after its release, due to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility...

iommufd Component DoS

The vulnerability of the iommufd component in the Linux operating system’s kernel is related to improper release of resources in the ioptaddaccess function. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domainsitree after splitting ioptarea In ioptareasplit, if the original ioptarea has filled a domain and is linked to domainsitree, pagesnodes have to be properly reinserted. Otherwise the...

SUSE CVE-2023-52801

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domainsitree after splitting ioptarea In ioptareasplit, if the original ioptarea has filled a domain and is linked to domainsitree, pagesnodes have to be properly reinserted. Otherwise the...

DEBIAN-CVE-2023-52801

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domainsitree after splitting ioptarea In ioptareasplit, if the original ioptarea has filled a domain and is linked to domainsitree, pagesnodes have to be properly reinserted. Otherwise the...

UBUNTU-CVE-2023-52801

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domainsitree after splitting ioptarea In ioptareasplit, if the original ioptarea has filled a domain and is linked to domainsitree, pagesnodes have to be properly reinserted. Otherwise the...

SUSE CVE-2024-26786

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix ioptaccesslistid overwrite bug Syzkaller reported the following WARNON: WARNING: CPU: 1 PID: 4738 at drivers/iommu/iommufd/iopagetable.c:1360 Call Trace: iommufdaccesschangeioas+0x2fe/0x4e0...

PT-2024-7741

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an overwrite of access-iopt access list id in the iopt add access function, which is called from iommufd access change ioas when xa alloc succeeds but iopt...

kernel: iommufd: Check for uptr overflow

A flaw was found in the iommufd subsystem of the Linux kernel. When setting up a mapping with a user virtual address that wraps past zero or otherwise triggers a pointer/size overflow, the kernel may fail to properly validate and constrain the user-provided values. This can result in a buffer...

PT-2023-9694

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of memory after it has been freed in the iopt area split function of the iommufd component, due to incorrect control of resource identifiers. This can all...

UBUNTU-CVE-2023-33250

The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...

PT-2023-2853

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.3 Description The issue is related to a use-after-free in the iopt unmap iova range function in the drivers/iommu/iommufd/io pagetable.c module of the Linux kernel. This could allow an attacker to cause a denial of servi...

PT-2023-36796

Уязвимость функции iopt area unpin domain модуля drivers/iommu/iommufd/pages.c драйвера IOMMU ядра операционной системы Linux связана с раскрытием конфиденциальной информации. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...