Security tracker / CVE-2023-7122

CVE-2023-7122

iommufd: Do not UAF during iommufd_put_object()

References

• Debian security tracker
• cve.org
• https://bugzilla.redhat.com/show_bug.cgi?id=2255987

Notes

 carnil> Introduced in 99f98a7c0d69 ("iommufd: IOMMUFD_DESTROY should
 carnil> not increase the refcount") in 6.5-rc4 (and backported to
 carnil> 6.4.8).

Bugs

Status

Branch	Status
upstream	released (6.7-rc5) [6f9c4d8c468c189d6dc470324bd52955f8aa0a10]
6.18-upstream-stable
6.17-upstream-stable
6.12-upstream-stable
6.11-upstream-stable	N/A "Fixed before branching point"
6.10-upstream-stable	N/A "Fixed before branching point"
6.6-upstream-stable	needed
6.1-upstream-stable	N/A "Vulnerable code not present"
5.10-upstream-stable	N/A "Vulnerable code not present"
4.19-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.7.7-1)
6.12-trixie-security
6.1-bookworm-security	N/A "Vulnerable code not present"
5.10-bullseye-security	N/A "Vulnerable code not present"