CVE-2022-48894
- Source
- https://cve.org/CVERecord?id=CVE-2022-48894
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48894.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-48894
- Downstream
- Published
- 2024-08-21T06:10:26Z
- Modified
- 2026-08-12T03:51:48Z
- Summary
- iommu/arm-smmu-v3: Don't unregister on shutdown
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iommu/arm-smmu-v3: Don't unregister on shutdown
Similar to SMMUv2, this driver calls iommu_device_unregister() from the shutdown path, which removes the IOMMU groups with no coordination whatsoever with their users - shutdown methods are optional in device drivers. This can lead to NULL pointer dereferences in those drivers' DMA API calls, or worse.
Instead of calling the full arm_smmu_device_remove() from arm_smmu_device_shutdown(), let's pick only the relevant function call - arm_smmu_device_disable() - more or less the reverse of arm_smmu_device_reset() - and call just that from the shutdown path.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48894.json" }- References
-
- https://git.kernel.org/stable/c/32ea2c57dc216b6ad8125fa680d31daa5d421c95
- https://git.kernel.org/stable/c/ead3e6c79479890444c777fd329afc125fecde48
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48894.json
- https://nvd.nist.gov/vuln/detail/CVE-2022-48894
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git