Vulnerability in iommu/arm-smmu Package: Fix arm_smmu_device Refcount Leak in Address Translation
Summary
GSD-2021-1001273: iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation. Affects Kernel versions < 43d1aaa1965f9b58035196dac49b1e1e6c9c25eb. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iommu/arm-smmu package is a component of the Linux Kernel that provides support for the ARM System MMU (SMMU) architecture. The SMMU is responsible for managing address translations between devices and memory in ARM-based systems. It ensures secure and efficient data transfers by enforcing memory access permissions and handling virtual-to-physical address translations. The arm_smmu_device is a key data structure in this package, representing an SMMU device instance. It keeps track of various properties and state information related to address translation. However, a vulnerability has been identified in the arm_smmu_device implementation that leads to a refcount leak during address translation.
Vulnerability Detail
The vulnerability in the iommu/arm-smmu package allows for a refcount leak in the arm_smmu_device during address translation. This leak can result in incorrect reference counting, leading to memory leaks and potential use-after-free vulnerabilities. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The vulnerability has been assigned the ID GSD-2021-1001273 and was published on August 3, 2021. It is fixed in Linux Kernel version v5.10.52 by commit 43d1aaa1965f9b58035196dac49b1e1e6c9c25eb.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the iommu/arm-smmu package in the Linux Kernel is vulnerable to a refcount leak in the arm_smmu_device during address translation. This vulnerability can lead to memory leaks, use-after-free issues, and potential code execution or denial-of-service attacks. It is crucial to update the Linux Kernel to version v5.10.52 or later to mitigate this vulnerability. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The iommu/arm-smmu package is a component of the Linux Kernel that provides support for the ARM System MMU (SMMU) architecture. It manages address translations between devices and memory in ARM-based systems.
The vulnerability can lead to a refcount leak in the arm_smmu_device during address translation, potentially resulting in memory leaks and use-after-free vulnerabilities. It could be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition.
To fix this vulnerability, update the Linux Kernel to version v5.10.52 or later, which includes the necessary commit to address the refcount leak. Obtain the updated kernel from the official Linux Kernel repository.
No specific workaround has been provided for this vulnerability. It is recommended to apply the official fix by updating the Linux Kernel.
You can find more information about this vulnerability, including the fix commit and its impact, in the vulnerability database entry: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001273.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
