Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-52801

iommufd: Fix missing update of domains_itree after splitting iopt_area

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 51fe6141f0f64ae0bbc096a41a07572273e8c0ef to < 836db2e7e4565d8218923b3552304a1637e2f28daffected
  • 51fe6141f0f64ae0bbc096a41a07572273e8c0ef to < fcb32111f01ddf3cbd04644cde1773428e31de6aaffected
  • 51fe6141f0f64ae0bbc096a41a07572273e8c0ef to < e7250ab7ca4998fe026f2149805b03e09dc32498affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.5.13 to ≤ 6.5.*unaffected
  • 6.6.3 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References