Bug 2426192 (CVE-2023-54174) - CVE-2023-54174 kernel: vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd
Summary: CVE-2023-54174 kernel: vfio: Fix NULL pointer dereference caused by uninitial...
Keywords:
Status: NEW
Alias: CVE-2023-54174
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-12-30 13:15 UTC by OSIDB Bzimport
Modified: 2025-12-31 02:31 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-12-30 13:15:25 UTC 
In the Linux kernel, the following vulnerability has been resolved:

vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd

group->iommufd is not initialized for the iommufd_ctx_put()

[20018.331541] BUG: kernel NULL pointer dereference, address: 0000000000000000
[20018.377508] RIP: 0010:iommufd_ctx_put+0x5/0x10 [iommufd]
...
[20018.476483] Call Trace:
[20018.479214]  <TASK>
[20018.481555]  vfio_group_fops_unl_ioctl+0x506/0x690 [vfio]
[20018.487586]  __x64_sys_ioctl+0x6a/0xb0
[20018.491773]  ? trace_hardirqs_on+0xc5/0xe0
[20018.496347]  do_syscall_64+0x67/0x90
[20018.500340]  entry_SYSCALL_64_after_hwframe+0x4b/0xb5
Comment 1 Alexander B 2025-12-31 02:27:40 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123022-CVE-2023-54174-1ff6@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.