Description
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation The reference counting issue happens in several exception handling paths of arm_smmu_iova_to_phys_hard(). When those error scenarios occur, the function forgets to decrease the refcount of "smmu" increased by arm_smmu_rpm_get(), causing a refcount leak. Fix this issue by jumping to "out" label when those error scenarios occur.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d4a44f0750bb9bf7c44c22444a482756b2344a79 to < b11220803ad14a2a880cc06d8e01fe2548cc85b0affectedd4a44f0750bb9bf7c44c22444a482756b2344a79 to < 43d1aaa1965f9b58035196dac49b1e1e6c9c25ebaffectedd4a44f0750bb9bf7c44c22444a482756b2344a79 to < 0f0c5ea09139777d90729d408b807021f2ea6492affectedd4a44f0750bb9bf7c44c22444a482756b2344a79 to < 5f9741a9a91f25c89e04b408cd61e3ab050ce24baffectedd4a44f0750bb9bf7c44c22444a482756b2344a79 to < 7c8f176d6a3fa18aa0f8875da6f7c672ed2a8554affected
Linux Linux
Default version status: affected
5.0affected0 to < 5.0unaffected5.4.134 to ≤ 5.4.*unaffected5.10.52 to ≤ 5.10.*unaffected5.12.19 to ≤ 5.12.*unaffected5.13.4 to ≤ 5.13.*unaffected5.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b11220803ad14a2a880cc06d8e01fe2548cc85b0 ↗
- https://git.kernel.org/stable/c/43d1aaa1965f9b58035196dac49b1e1e6c9c25eb ↗
- https://git.kernel.org/stable/c/0f0c5ea09139777d90729d408b807021f2ea6492 ↗
- https://git.kernel.org/stable/c/5f9741a9a91f25c89e04b408cd61e3ab050ce24b ↗
- https://git.kernel.org/stable/c/7c8f176d6a3fa18aa0f8875da6f7c672ed2a8554 ↗