Use-after-free vulnerability in iommu/arm-smmu-v3-sva
Summary
GSD-2022-1003027: iommu/arm-smmu-v3-sva: Fix mm use-after-free. Affects Kernel versions >= 32784a9562fb0518b12e9797ee2aec52214adf6f, < e3cbbdbff8a4db5d053c53fd71be62ccccdb52b0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iommu/arm-smmu-v3-sva is a component of the Linux Kernel that provides support for the ARM System MMU Version 3 (SMMUv3) Secure Virtual Addressing (SVA). SMMUv3 is responsible for managing memory translations and access control for devices connected to an ARM-based system. This vulnerability affects the iommu/arm-smmu-v3-sva module and can lead to a use-after-free condition.
Vulnerability Detail
The use-after-free vulnerability in iommu/arm-smmu-v3-sva occurs when a memory region is freed but still accessed by the system. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The vulnerability was introduced in Linux Kernel version v5.11 and was fixed in version v5.17.14. The impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix as soon as possible.
Conclusion
The use-after-free vulnerability in iommu/arm-smmu-v3-sva can lead to arbitrary code execution or denial-of-service. It is recommended to update the Linux Kernel to version v5.17.14 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
iommu/arm-smmu-v3-sva is a component of the Linux Kernel that provides support for the ARM System MMU Version 3 (SMMUv3) Secure Virtual Addressing (SVA). It manages memory translations and access control for devices connected to an ARM-based system.
A use-after-free vulnerability occurs when a program or system continues to use a memory region after it has been freed. This can lead to memory corruption, crashes, or arbitrary code execution.
An attacker could exploit this vulnerability by crafting a malicious input that triggers the use-after-free condition. This could allow them to execute arbitrary code or cause a denial-of-service condition.
This vulnerability was introduced in Linux Kernel version v5.11.
The impact and attack plausibility of this vulnerability have not been proven.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
