CVE-2024-56668

Summary

CVE-2024-56668 is a Linux kernel vulnerability affecting the iommufd driver's iopt_map_common function. The issue arises due to a missed qi_batch allocation for nested parent domains, leading to a NULL pointer dereference at kernel address 0x0000000000000200. This defect can also cause a potential memory leak since the domain->qi_batch allocation lacks a lock. The vulnerability has been rectified by adding a helper for qi_batch allocation and utilizing it in both __cache_tag_assign_domain() and __cache_tag_assign_parent_domain(). The flaw can lead to a kernel panic and potentially allow unauthorized access or data manipulation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.