CVE-2024-47719

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description The issue is related to the iommufd component in the Linux kernel, where an overflow of the ALIGN() function during iova allocation can occur. This happens when userspace supplies an iova and uptr such that the target iova alignment becomes very large, causing the ALIGN() function to overflow and corrupt the selected area range during allocation. The CONFIG IOMMUFD TEST configuration can detect this issue. The problem can lead to fragmentation and consumption of the available IOVA space without any reason.

Recommendations Update to Linux kernel version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the use of the iommufd component until a patch is available.