CVE-2022-48894
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-48894
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48894.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-48894
- Related
- Published
- 2024-08-21T07:15:05Z
- Modified
- 2024-09-18T01:00:21Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iommu/arm-smmu-v3: Don't unregister on shutdown
Similar to SMMUv2, this driver calls iommudeviceunregister() from the shutdown path, which removes the IOMMU groups with no coordination whatsoever with their users - shutdown methods are optional in device drivers. This can lead to NULL pointer dereferences in those drivers' DMA API calls, or worse.
Instead of calling the full armsmmudeviceremove() from armsmmudeviceshutdown(), let's pick only the relevant function call - armsmmudevicedisable() - more or less the reverse of armsmmudevicereset() - and call just that from the shutdown path.
- References
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source