CVE-2024-53232

Summary

CVE-2024-53232 is a vulnerability affecting the Linux kernel's IOMMU (Input/Output Memory Management Unit) subsystem on the s390 architecture. The issue involves a crash that occurs during surprise hot-unplugging of a PCI device. This happens due to a failure in attaching the default domain during the hot-unplug process when the platform no longer recognizes the device, resulting in a NULL domain pointer and a use-after-free (UAF) condition. To mitigate this issue, the implementation of a blocking domain has been introduced, which can handle already removed devices and prevent UAF. Although the crash has been fixed, a warning still appears when attempting to change DMA ownership on a blocked device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.