CVE-2024-40945: iommu: Return right value in iommu_sva_bind_device()
In the Linux kernel, the following vulnerability has been resolved:
iommu: Return right value in iommusvabinddevice()
iommusvabinddevice() should return either a sva bond handle or an ERRPTR value in error cases. Existing drivers (idxd and uacce) only check the return value with ISERR(). This could potentially lead to a kernel NULL pointer dereference issue if the function returns NULL instead of an error pointer.
In reality, this doesn't cause any problems because iommusvabinddevice() only returns NULL when the kernel is not configured with CONFIGIOMMUSVA. In this case, iommudevenablefeature(dev, IOMMUDEVFEATSVA) will return an error, and the device drivers won't call iommusvabinddevice() at all.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40945?
CVE-2024-40945 is classified as a high severity vulnerability in the Linux kernel.
How do I fix CVE-2024-40945?
To fix CVE-2024-40945, upgrade to the latest kernel versions specified in the remediation list.
Which Linux kernel versions are affected by CVE-2024-40945?
CVE-2024-40945 affects Linux kernel versions prior to 5.4.279, 5.10.221, 5.15.162, 6.6.35, 6.9.6, and 6.10.
What impact does CVE-2024-40945 have on my system?
CVE-2024-40945 could potentially lead to improper handling of device binding in the kernel, causing system instability or security issues.
Is there a known exploit for CVE-2024-40945?
As of now, there are no publicly known exploits specifically targeting CVE-2024-40945.