Description
In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufd_access_notify_unmap() skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufd_lock_obj() before checking whether the access is internal. If iommufd_lock_obj() succeeds, the loop then sees the internal access and continues, bypassing the matching iommufd_put_object() used by the normal unmap path. This leaks the object reference taken by iommufd_lock_obj(). Check for internal accesses first so skipped entries are never locked.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
27b77ea5feaa8fcf385ea99ce757982b0ac9d1f0 to < 436189ee4bb2c7c993b945d68570dd38c3e4349eaffected27b77ea5feaa8fcf385ea99ce757982b0ac9d1f0 to < 50a66a63d1c841ae6b28a4551f642c1bba4c9529affected27b77ea5feaa8fcf385ea99ce757982b0ac9d1f0 to < 0dbcdf4473a614adbd732d567c9b39ac0e040e0caffected
Linux Linux
Default version status: affected
6.17affected0 to < 6.17unaffected6.18.50 to ≤ 6.18.*unaffected7.2.4 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected