← CVE Intelligence

CVE-2023-52801

iommufd: Fix missing update of domains_itree after splitting iopt_area PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 51fe6141f0f64ae0bbc096a41a07572273e8c0ef before 836db2e7e4565d8218923b3552304a1637e2f28d; affected 51fe6141f0f64ae0bbc096a41a07572273e8c0ef before fcb32111f01ddf3cbd04644cde1773428e31de6a; affected 51fe6141f0f64ae0bbc096a41a07572273e8c0ef before e7250ab7ca4998fe026f2149805b03e09dc32498
Linux / Linuxaffected 6.2; unaffected 0 before 6.2; unaffected 6.5.13 through 6.5.*; unaffected 6.6.3 through 6.6.*; unaffected 6.7 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.