Riskcovery

CVE-2024-40945

iommu: Return right value in iommu_sva_bind_device()

State
Published
Severity
Not scored
Published
Jul 12, 2024
Updated
Oct 15, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu: Return right value in iommu_sva_bind_device()

iommu_sva_bind_device() should return either a sva bond handle or an ERR_PTR value in error cases. Existing drivers (idxd and uacce) only check the return value with IS_ERR(). This could potentially lead to a kernel NULL pointer dereference issue if the function returns NULL instead of an error pointer.

In reality, this doesn't cause any problems because iommu_sva_bind_device() only returns NULL when the kernel is not configured with CONFIG_IOMMU_SVA. In this case, iommu_dev_enable_feature(dev, IOMMU_DEV_FEAT_SVA) will return an error, and the device drivers won't call iommu_sva_bind_device() at all.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 700f564758882db7c039dfba9443fe762561a3f8Affected
  • 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before cf34f8f66982a36e5cba0d05781b21ec9606b91eAffected
  • 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 2973b8e7d127754de9013177c41c0b5547406998Affected
  • 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 6325eab6c108fed27f60ff51852e3eac0ba23f3fAffected
  • 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 7388ae6f26c0ba95f70cc96bf9c5d5cb06c908b6Affected
  • 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 61a96da9649a6b6a1a5d5bde9374b045fdb5c12eAffected
  • 26b25a2b98e45aeb40eedcedc586ad5034cbd984 to before 89e8a2366e3bce584b6c01549d5019c5cda1205eAffected
LinuxLinux
  • 5.2Affected
  • before 5.2Not affected
  • 5.4.279 through 5.4.*Not affected
  • 5.10.221 through 5.10.*Not affected
  • 5.15.162 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.35 through 6.6.*Not affected
  • 6.9.6 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.