PT-2023-9440 · Linux+1 · Linux Kernel+1

Robin Murphy + 1 · Published 2023-01-13 · Updated 2024-09-24 · CVE-2022-48894

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the iommu/arm-smmu-v3 component in the Linux kernel. It is caused by the driver calling iommu device unregister() from the shutdown path, which removes the IOMMU groups without coordination with their users. This can lead to NULL pointer dereferences in the drivers' DMA API calls. The problem is similar to the one in SMMUv2. Instead of calling the full arm smmu device remove() from arm smmu device shutdown(), the relevant function call arm smmu device disable() is used, which is more or less the reverse of arm smmu device reset(). The exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-07591

CVE-2022-48894

Affected Products

Linux Kernel

Red Os

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48894.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48894 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48894 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48894 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48894 · Security Note
• https://git.kernel.org/stable/c/32ea2c57dc216b6ad8125fa680d31daa5d421c95 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-48894 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48894 · Vendor Advisory
• https://git.kernel.org/stable/c/ead3e6c79479890444c777fd329afc125fecde48 · Patch
• https://cve.org/CVERecord?id=CVE-2022-48894 · Security Note
• https://bdu.fstec.ru/vul/2024-07591 · Security Note
• https://redos.red-soft.ru/support/secure · Note
• https://lore.kernel.org/linux-cve-announce/2024082110-CVE-2022-48894-7997@gregkh · Note
• https://t.me/cvenotify/94208 · Telegram Post
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.7 · Note