Vulnerability in powerpc/iommu package: Missing of_node_put in iommu_init_early_dart
Summary
GSD-2022-1003355: powerpc/iommu: Add missing of_node_put in iommu_init_early_dart. Affects Kernel versions < df6d8b689252c0acc0448d4ae3d33f2d6db048ab. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The powerpc/iommu package is a component of the Linux Kernel that provides support for Input/Output Memory Management Units (IOMMUs) on PowerPC architectures. IOMMUs are responsible for managing memory access and translation for devices connected to the system. The iommu_init_early_dart function initializes the IOMMU subsystem during early system boot. However, a missing of_node_put call in this function can lead to a resource leak, potentially causing system instability or denial-of-service attacks.
Vulnerability Detail
The vulnerability arises from the omission of the of_node_put function in the iommu_init_early_dart function of the powerpc/iommu package. This function is responsible for releasing the reference to a device tree node obtained during initialization. Without the of_node_put call, the reference count is not decremented, leading to a resource leak. An attacker could potentially exploit this vulnerability to exhaust system resources, resulting in system instability or denial-of-service. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the powerpc/iommu package in the Linux Kernel is vulnerable to a missing of_node_put call in the iommu_init_early_dart function. This can result in resource leaks, potentially leading to system instability or denial-of-service attacks. It is crucial to update the Linux Kernel to version v5.15.46 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The powerpc/iommu package is a component of the Linux Kernel that provides support for Input/Output Memory Management Units (IOMMUs) on PowerPC architectures. IOMMUs are responsible for managing memory access and translation for devices connected to the system.
The impact of this vulnerability includes potential system instability and denial-of-service attacks. The resource leak caused by the missing of_node_put call can lead to the exhaustion of system resources, affecting the overall performance and availability of the system.
No, the impact and attack plausibility of this vulnerability have not been proven yet. However, the missing of_node_put call can potentially lead to resource leaks, which can be exploited by an attacker to exhaust system resources.
To fix this vulnerability, you should update your Linux Kernel to version v5.15.46 or later, which includes the necessary fix commit df6d8b689252c0acc0448d4ae3d33f2d6db048ab. This ensures that the missing of_node_put call is added to the iommu_init_early_dart function, preventing resource leaks.
No specific workaround has been mentioned for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the patched version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
