CVE-2023-53795

In the Linux kernel, the following vulnerability has been resolved: iommufd: IOMMUFDDESTROY should not increase the refcount syzkaller found a race where IOMMUFDDESTROY increments the refcount: obj = iommufdgetobjectucmd-ictx, cmd-id, IOMMUFDOBJANY; if ISERRobj return PTRERRobj;...

CVE-2023-53795

The CVE-2023-53795 issue in the Linux kernel concerns a race where IOMMUFD_DESTROY would incorrectly increment an object’s refcount, potentially causing spurious failures during destruction when combined with iommufd_object_destroy_user. Public advisories confirm a fix that avoids any refcount in...