CVE-2023-52801

iommufd: Fix missing update of domains_itree after splitting iopt_area

State: Published
Severity: 8.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Fix missing update of domains_itree after splitting iopt_area

In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Linux
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H	CISA-ADP

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
LinuxLinux	51fe6141f0f64ae0bbc096a41a07572273e8c0ef to before 836db2e7e4565d8218923b3552304a1637e2f28dAffected 51fe6141f0f64ae0bbc096a41a07572273e8c0ef to before fcb32111f01ddf3cbd04644cde1773428e31de6aAffected 51fe6141f0f64ae0bbc096a41a07572273e8c0ef to before e7250ab7ca4998fe026f2149805b03e09dc32498Affected
LinuxLinux	6.2Affected before 6.2Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.