CVE-2022-48894

published 2024-08-21

CVE-2022-48894: In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Don't unregister on shutdown Similar to SMMUv2, this driver calls…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

iommu/arm-smmu-v3: Don't unregister on shutdown

Similar to SMMUv2, this driver calls iommu_device_unregister() from the
shutdown path, which removes the IOMMU groups with no coordination
whatsoever with their users - shutdown methods are optional in device
drivers. This can lead to NULL pointer dereferences in those drivers'
DMA API calls, or worse.

Instead of calling the full arm_smmu_device_remove() from
arm_smmu_device_shutdown(), let's pick only the relevant function call -
arm_smmu_device_disable() - more or less the reverse of
arm_smmu_device_reset() - and call just that from the shutdown path.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.7-1 (bookworm)	linux 6.1.7-1 (bookworm)
linux	linux	—	—
linux	linux	>= 57365a04c92126525a58bf7a1599ddfa832415e9 < ead3e6c79479890444c777fd329afc125fecde48	ead3e6c79479890444c777fd329afc125fecde48
linux	linux	>= 57365a04c92126525a58bf7a1599ddfa832415e9 < 32ea2c57dc216b6ad8125fa680d31daa5d421c95	32ea2c57dc216b6ad8125fa680d31daa5d421c95
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.1.7-1	6.1.7-1
linux	linux_kernel	>= 0 < 6.1.7-1	6.1.7-1
linux	linux_kernel	>= 0 < 6.1.7-1	6.1.7-1
linux	linux_kernel	>= 6.1 < 6.1.7	6.1.7

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-476