CVE-2024-56568

Summary

CVE-2024-56568 is a vulnerability affecting the Linux kernel's IOMMU (Input/Output Memory Management Unit) subsystem, specifically the arm-smmu driver. During the probe process of an SMMU (Secure Memory Management Unit) device and a client device, a race condition can occur, leading to a null pointer dereference. This issue arises when the client's of_dma_configure() call is executed before the smmu driver's driver_bound() event has been triggered. The race condition causes the client to try and access the SMMU's memory (smmu pointer) while it is still null, resulting in a crash. The vulnerability can be mitigated by deferring the client device probe until the SMMU device has successfully bound to the arm smmu driver.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.