CVE-2023-52801
High
Description
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux Kernel
PublishedMay 21, 2024
First seenMay 21, 2024
Weakness typeCWE-284Improper access control
How to fix
Update
- linux linux_kernel6.5.13, 6.6.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.2 ≤ v < 6.5.13, 6.6 ≤ v < 6.6.3 | 6.5.13, 6.6.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.