Longpeng

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to the vdpa sim component of the Linux kernel, where a NULL pointer dereference can occur, potentially causing a system crash. This happens when an uninitialized iova domain is put, which can occur when an error happens before the iova domain is initialized in vdpasim create(). The system will crash if an uninitialized iova domain is put. To fix this, it is necessary to ensure the iova domain is initialized before it is used. Additionally, a warning may be triggered in drivers/iommu/iova.c if iova cache put() is invoked without a prior iova cache get(). Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.