Fix for event handling soft lockup in iommu/arm-smmu-v3
Summary
GSD-2022-1001731: iommu/arm-smmu-v3: fix event handling soft lockup. Affects Kernel versions < 99073052f45be3b4543f87547e94dfe04bf56f39. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iommu/arm-smmu-v3 is a component of the Linux Kernel that provides support for Input-Output Memory Management Units (IOMMUs) on ARM-based systems. It is responsible for managing memory access and translation for devices connected to the system. The arm-smmu-v3 module specifically handles event handling related to IOMMU operations. However, a vulnerability has been discovered in this module that can lead to a soft lockup, causing the system to become unresponsive.
Vulnerability Detail
The vulnerability in iommu/arm-smmu-v3 arises from a flaw in the event handling mechanism. When certain events occur during IOMMU operations, the module fails to handle them properly, resulting in a soft lockup. This can be exploited by an attacker to cause a denial-of-service condition or potentially execute arbitrary code. The impact of this vulnerability depends on the context in which the affected system is used, but it has the potential to disrupt critical operations or compromise system integrity.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the arm-smmu-v3 module if it is not required for their system's functionality. This can be done by blacklisting the module or removing it from the kernel configuration. However, it is recommended to apply the official fix by updating the kernel to ensure the system is fully protected.
Conclusion
The vulnerability in iommu/arm-smmu-v3 can lead to a soft lockup and potential system compromise. It is crucial to update the Linux Kernel to version v5.15.34 or later to mitigate this vulnerability. Disabling the arm-smmu-v3 module can serve as a temporary workaround, but applying the official fix is recommended. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
iommu/arm-smmu-v3 is a component of the Linux Kernel that provides support for Input-Output Memory Management Units (IOMMUs) on ARM-based systems. It manages memory access and translation for devices connected to the system.
The vulnerability can lead to a soft lockup, causing the system to become unresponsive. It can be exploited to cause a denial-of-service condition or potentially execute arbitrary code, depending on the attacker's capabilities.
To fix the vulnerability, update your Linux Kernel to version v5.15.34 or a later one that includes the fix. Compile the updated kernel or use package management tools provided by your Linux distribution.
Yes, you can disable the arm-smmu-v3 module if it is not required for your system's functionality. Blacklist the module or remove it from the kernel configuration. However, it is recommended to apply the official fix by updating the kernel.
For more information, you can refer to the vulnerability details in the Open Source Vulnerability format provided by the Cloud Security Alliance's GSD database. You can also use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
