CVE-2024-46824

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Require drivers to supply the cache_invalidate_user ops

If drivers don't do this then iommufd will oops invalidation ioctls with

something like:

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000

Mem abort info:

ESR = 0x0000000086000004

EC = 0x21: IABT (current EL), IL = 32 bits

SET = 0, FnV = 0

EA = 0, S1PTW = 0

FSC = 0x04: level 0 translation fault

user pgtable: 4k pages, 48-bit VAs, pgdp=0000000101059000

[0000000000000000] pgd=0000000000000000, p4d=0000000000000000

Internal error: Oops: 0000000086000004 [#1] PREEMPT SMP

Modules linked in:

CPU: 2 PID: 371 Comm: qemu-system-aar Not tainted 6.8.0-rc7-gde77230ac23a #9

Hardware name: linux,dummy-virt (DT)

pstate: 81400809 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=-c)

pc : 0x0

lr : iommufd_hwpt_invalidate+0xa4/0x204

sp : ffff800080f3bcc0

x29: ffff800080f3bcf0 x28: ffff0000c369b300

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References