CVE-2024-26786

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an overwrite of access->iopt access list id in the iopt add access() function, which is called from iommufd access change ioas() when xa alloc() succeeds but iopt calculate iova alignment() fails. This results in a mismatch between the access pointer in the list and the passed-in pointer. The vulnerability can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.