Riskcovery

CVE-2023-54034

iommufd: Make sure to zero vfio_iommu_type1_info before copying to user

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Make sure to zero vfio_iommu_type1_info before copying to user

Missed a zero initialization here. Most of the struct is filled with a copy_from_user(), however minsz for that copy is smaller than the actual struct by 8 bytes, thus we don't fill the padding.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d624d6652a65ad4f47a58b8651a1ec1163bb81d3 to before 7adcec686e4d699c169d34c722132b2bce5232cbAffected
  • d624d6652a65ad4f47a58b8651a1ec1163bb81d3 to before b3551ead616318ea155558cdbe7e91495b8d9b33Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.2.3 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.