PT-2023-9440 · Linux+1 · Linux Kernel+1
Robin Murphy
+1
·
Publicado
2023-01-13
·
Atualizado
2024-09-24
·
CVE-2022-48894
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the iommu/arm-smmu-v3 component in the Linux kernel. It is caused by the driver calling iommu device unregister() from the shutdown path, which removes the IOMMU groups without coordination with their users. This can lead to NULL pointer dereferences in the drivers' DMA API calls. The problem is similar to the one in SMMUv2. Instead of calling the full arm smmu device remove() from arm smmu device shutdown(), the relevant function call arm smmu device disable() is used, which is more or less the reverse of arm smmu device reset(). The exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Os