huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2023-49083: python-cryptography: NULL-dereference when loading PKCS7 certificates
Component: python-cryptography
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2023-11-28T00:00:00+00:00

A null-pointer dereference vulnerability was found in python-cryptography during the loading of PKCS7 certificates. Invoking "load_pem_pkcs7_certificates" or "load_der_pkcs7_certificates" can trigger this issue and lead to subsequent segmentation fault and result in a Denial of Service (DoS) for any application aiming to deserialize a PKCS7 blob or certificate. The potential impact includes disruptions in system availability and stability.

Statement: This vulnerability arises when functions like "load_pem_pkcs7_certificates" or "load_der_pkcs7_certificates" are invoked, triggering the issue during the deserialization of PKCS7 blobs or certificates. The moderate rating is based on the fact that the vulnerability can lead to a segmentation fault, posing a risk of disrupting the normal functioning of any application attempting to deserialize the mentioned certificates. While the impact is significant in terms of service denial and potential system instability, the severity is deemed moderate as it does not directly expose sensitive data or allow for remote code execution, focusing primarily on the localized consequences of a DoS scenario.

Affected upstream versions: >= 3.1, < 41.0.6
Fixed upstream versions: 41.0.6
Upstream repository: https://github.com/pyca/cryptography
Upstream fix commit: f09c261ca10a31fe41b1262306db7f8f1da0e48a
CVE-2023-4921: kernel: use-after-free in sch_qfq network scheduler
Component: kernel
Severity: Important
CWE: CWE-416 (Use After Free)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2023-09-05T00:00:00+00:00

A use-after-free flaw was found in qfq_dequeue and agg_dequeue in net/sched/sch_qfq.c in the Traffic Control (QoS) subsystem in the Linux kernel. This issue may allow a local user to crash the system or escalate their privileges on the system.


Affected upstream versions: 3.8 < 6.6
Fixed upstream versions: 6.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 8fc134fee27f2263988ae38920bc03da416b03d8
CVE-2023-49285: squid: Buffer over-read in the HTTP Message processing feature
Component: squid
Severity: Important
CWE: CWE-126 (Buffer Over-read)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2023-12-04T00:00:00+00:00

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service.

Statement: The only security impact of this vulnerability is a remote denial of service. For this reason, this flaw was rated with an important, and not critical, severity.

Affected upstream versions: >= 2.2, < 6.5
Upstream repository: https://github.com/squid-cache/squid
Upstream fix commit: 77b3fb4df0f126784d5fd4967c28ed40eb8d521b
CVE-2023-49286: squid: Incorrect Check of Function Return Value In Helper Process management
Component: squid
Severity: Important
CWE: CWE-253 (Incorrect Check of Function Return Value)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2023-12-04T00:00:00+00:00

A flaw was found in Squid due to an incorrect check of the return value in the helper process management. This issue may allow attackers to perform remote denial of service.

Statement: The only security impact of this vulnerability is a remote denial of service. For this reason, this flaw was rated with an important, and not critical, severity.

Affected upstream versions: < 6.5
Fixed upstream versions: SQUID_6_5
Upstream repository: https://github.com/squid-cache/squid
Upstream fix commit: 6014c6648a2a54a4ecb7f952ea1163e0798f9264
CVE-2023-49295: quic-go: memory exhaustion attack against QUIC's path validation mechanism
Component: quic-go
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-01-10T00:00:00+00:00

A memory exhaustion vulnerability was found in Quic-GO, where a malicious client exploits the path validation mechanism to induce the server into accumulating an unbounded queue of PATH_RESPONSE frames, depleting its memory. The attacker controls the victim's packet send rate by overwhelming the server with numerous packets containing PATH_CHALLENGE frames. Through selective acknowledgments of received packets and manipulation of peer's Round-Trip Time (RTT) estimates, the attacker induces congestion control mechanisms to reduce the server's send rate significantly. Consequently, the victim server is compelled to store an increasing number of queued PATH_RESPONSE frames, resulting in memory exhaustion.


Affected upstream versions: = 0.40.0, >= 0.39.0, < 0.39.4, >= 0.38.0, < 0.38.2, < 0.37.7
Fixed upstream versions: v0.38.2
Upstream repository: https://github.com/quic-go/quic-go
Upstream fix commit: 17fc98c2d81dbe685c19702dc694a9d606ac56dc
CVE-2023-50229: bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
Component: bluez
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 7.1 (CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2024-05-03T00:00:00+00:00

A flaw was found within the handling of the Phone Book Access profile in BlueZ. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.


Affected upstream versions: 5.66
Fixed upstream versions: 5.70
Upstream repository: https://github.com/bluez/bluez
Upstream fix commit: 5ab5352531a9cc7058cce569607f3a6831464443
CVE-2023-50230: bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
Component: bluez
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 7.1 (CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2024-05-03T00:00:00+00:00

A flaw was found within the handling of the Phone Book Access profile in BlueZ. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.


Affected upstream versions: 5.66
Fixed upstream versions: 5.70
Upstream repository: https://github.com/bluez/bluez
Upstream fix commit: 5ab5352531a9cc7058cce569607f3a6831464443
CVE-2023-50726: CD: Users with `create` but not `override` privileges can perform local sync
Component: CD
Severity: Moderate
CWE: CWE-269 (Improper Privilege Management)
CVSS v3: 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L)
Public date: 2024-03-13T00:00:00+00:00

A flaw was found in the Argo CD package. An improper validation bug allows users to sync local manifests on app creation, who have create privileges but not override privileges. All other restrictions, including AppProject restrictions, are still enforced. The only restriction that is not enforced is that the manifests come from some approved git/Helm/OCI source.


Affected upstream versions: >= 1.2.0-rc1, < 2.8.12, >= 2.9.0, < 2.9.8, >= 2.10.0, < 2.10.3
Fixed upstream versions: v2.11.0
Upstream repository: https://github.com/argoproj/argo-cd
Upstream fix commit: 3b8f673f06c2d228e01cbc830e5cb57cef008978
CVE-2023-51042: kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2024-01-23T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel's AMD GPU driver which may allow access to members of a synchronization structure after the structure is freed. This issue could allow a local user to crash the system or to access confidential system memory.

Statement: This issue is only applicable to the amdgpu module, which is typically only loaded on systems that use AMD GPU hardware. Use the `lsmod` command to determine whether the amdgpu module is loaded.

Affected upstream versions: n/a
Fixed upstream versions: v6.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 2e54154b9f27262efd0cb4f903cc7d5ad1fe9628
CVE-2023-51043: kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2024-01-23T00:00:00+00:00

A flaw was found in the Linux kernel Direct Rendering Infrastructure (DRI) subsystem in which a use-after-free can be caused when a user triggers a race condition between a nonblocking atomic commit and a driver unload. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

Statement: The Red Hat Enterprise Linux 8 and Red Hat Enterprise Linux 9 affected. The impact level is Moderate, because potential use-after-free could happen only during loading/unloading driver (that requires some privileges).

Affected upstream versions: n/a
Fixed upstream versions: v6.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4e076c73e4f6e90816b30fcd4a0d7ab365087255
CVE-2023-51385: openssh: potential command injection via shell metacharacters
Component: openssh
Severity: Moderate
CWE: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Public date: 2023-12-18T00:00:00+00:00

A flaw was found in OpenSSH. In certain circumstances, a remote attacker may be able to execute arbitrary OS commands by using expansion tokens, such as %u or %h, with user names or host names that contain shell metacharacters.

Statement: The ability to execute OS commands is dependent on what quoting is present in the user-supplied ssh_config directive. However, it is generally the user's responsibility to validate arguments passed to SSH.

Affected upstream versions: n/a
Fixed upstream versions: V_9_6_P1
Upstream repository: https://github.com/openssh/openssh-portable
Upstream fix commit: 7ef3787c84b6b524501211b11a26c742f829af1a
CVE-2023-51779: kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg
Component: kernel
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2023-12-25T00:00:00+00:00

A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the bt_sock_recvmsg() and bt_sock_ioctl() functions could lead to a use-after-free on a socket buffer ("skb"). This flaw allows a local user to cause a denial of service condition or potential code execution.

Statement: This flaw has been rated as having a Moderate impact because it is believed to be difficult to exploit and it is not clear whether or not it could be used to achieve local privilege escalation.

Affected upstream versions: n/a
Fixed upstream versions: v6.7
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 2e07e8348ea454615e268222ae3fc240421be768
CVE-2023-51780: kernel: use-after-free in net/atm/ioctl.c
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2024-01-10T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel's net/atm/ioctl.c (ATM networking technology driver): do_vcc_ioctl in net/atm/ioctl.c is vulnerable to use-after-free due to a race condition in vcc_recvmsg. This issue can allow an attacker to possibly gain unauthorized access, escalate privileges, or cause the system to crash.

Statement: This issue is considered to be Moderate because there is no known way to trigger kernel panic, only read incorrect buffer size because it occurs in the SIOCINQ call that returns the number of unread bytes in the receive buffer.

Affected upstream versions: n/a
Fixed upstream versions: v6.7
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 24e90b9e34f9e039f56b5f25f6e6eb92cdd8f4b3
CVE-2023-52160: wpa_supplicant: potential authorization bypass
Component: wpa_supplicant
Severity: Moderate
CWE: CWE-285 (Improper Authorization)
CVSS v3: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2024-02-16T00:00:00+00:00

A flaw was found in wpa_supplicant's implementation of PEAP. This issue may allow an attacker to skip the second phase of authentication when the target device has not been properly configured to verify the authentication server. By skipping the second phase of authentication, it’s easier for an attacker to create a rogue clone of a trusted WiFi network to trick the victim into connecting, all without knowing their password.

Statement: While the flaw in wpa_supplicant's implementation of PEAP authentication represents a concerning security vulnerability, its classification as a moderate severity issue is based on several factors. Firstly, the attack requires specific prerequisites, including knowledge of the target SSID and the misconfiguration of wpa_supplicant on the victim's device, which somewhat limits its widespread exploitation. Additionally, the attack vector primarily targets Enterprise networks relying on PEAP authentication, narrowing its impact compared to more widely used authentication methods. Furthermore, while the ability to bypass Phase-2 authentication poses a risk of unauthorized network access and potential data exposure, it does not directly compromise the confidentiality or integrity of sensitive information.

Affected upstream versions: n/a
Fixed upstream versions: hostap_2_11
Upstream repository: https://w1.fi/cgit/hostap
Upstream fix commit: 8e6485a1bcb0baffdea9e55255a81270b768439c
CVE-2023-5217: libvpx: Heap buffer overflow in vp8 encoding in libvpx
Component: libvpx
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2023-09-27T00:00:00+00:00

A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a web browser that is compiled with this library.

Statement: This security issue has been classified as having an Important security impact. Desktop users are at a high risk of exploitation of this flaw with very minimal interaction. It may compromise the confidentiality, integrity, or availability of resources.

Customers using this application, which does server-side video codecs by linking to the libvpx library, are also potentially impacted by this flaw and are advised to update to the fixed versions of the package.

Affected upstream versions: 117.0.5938.132 < 117.0.5938.132, 1.13.1 < 1.13.1
Fixed upstream versions: 1.13.1, 117.0.5938.132
Upstream repository: https://github.com/webmproject/libvpx
Upstream fix commit: 3fbd1dca6a4d2dad332a2110d646e4ffef36d590
CVE-2023-52340: kernel: ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-01-22T00:00:00+00:00

A flaw in the routing table size was found in the ICMPv6 handling of "Packet Too Big". The size of the routing table is regulated by periodic garbage collection. However, with "Packet Too Big Messages" it is possible to exceed the routing table size and garbage collector threshold. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.


Affected upstream versions: n/a
Fixed upstream versions: v6.3
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: af6d10345ca76670c1b7c37799f0d5576ccef277
CVE-2023-52428: nimbus-jose-jwt: large JWE p2c header value causes Denial of Service
Component: nimbus-jose-jwt
Severity: Important
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-11T00:00:00+00:00

A vulnerability was found in the Nimbus Jose JWT package. By crafting a JWE with an excessively large p2c value, an attacker can trigger significant resource consumption during decryption, potentially leading to application slowdown or unavailability.


Affected upstream versions: n/a
Fixed upstream versions: 9.37.2
Upstream repository: https://bitbucket.org/connect2id/nimbus-jose-jwt
Upstream fix commit: 3b3b77e
CVE-2023-52434: kernel: smb: client: fix potential OOBs in smb2_parse_contexts()
Component: kernel
Severity: Moderate
CVSS v3: 5.9 (CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H)
Public date: 2024-02-20T00:00:00+00:00

A flaw was found in the smb client in the Linux kernel. A potential out-of-bounds error was seen in the smb2_parse_contexts() function. Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().


Affected upstream versions: 3.7
Fixed upstream versions: 0, 5.10.211, 5.15.150, 5.4.277, 6.1.79, 6.6.8, 6.7
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 17a0f64cc02d4972e21c733d9f21d1c512963afa
CVE-2023-52439: kernel: uio: Fix use-after-free in uio_open
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2024-02-20T00:00:00+00:00

A flaw was found in the Linux kernel’s uio subsystem. A use-after-free memory flaw in the uio_open functionality allows a local user to crash or escalate their privileges on the system.

Statement: The bug could happen only if uio being used (userspace driver core code that allows userspace programs easy access to kernel interrupts and memory locations, allowing some drivers to be written in userspace). Since the bug happens during loading or unloading of uio (that is privileged operation), the security impact is limited.

Affected upstream versions: 4.14.100 < 4.15, 4.18
Fixed upstream versions: 0, 4.15, 4.19.306, 5.10.209, 5.15.148, 5.4.268, 6.1.74, 6.6.13, 6.7.1, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 3174e0f7de1ba392dc191625da83df02d695b60c
CVE-2023-52445: kernel: pvrusb2: fix use after free on context disconnection
Component: kernel
Severity: Low
CWE: CWE-416 (Use After Free)
CVSS v3: 3 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L)
Public date: 2024-02-22T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

media: pvrusb2: fix use after free on context disconnection

Upon module load, a kthread is created targeting the
pvr2_context_thread_func function, which may call pvr2_context_destroy
and thus call kfree() on the context object. However, that might happen
before the usb hub_event handler is able to notify the driver. This
patch adds a sanity check before the invalid read reported by syzbot,
within the context disconnection call stack.


Affected upstream versions: 2.6.26
Fixed upstream versions: 0, 4.19.306, 5.10.209, 5.15.148, 5.4.268, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: ec36c134dd020d28e312c2f1766f85525e747aab
CVE-2023-52448: kernel: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
Component: kernel
Severity: Moderate
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-22T00:00:00+00:00

A NULL pointer dereference flaw was found in the Linux kernel when accessing the rgd->rd_rgl in the gfs2_rgrp_dump() function. This issue may lead to a crash.


Affected upstream versions: 4.20
Fixed upstream versions: 0, 5.10.209, 5.15.148, 5.4.268, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: efc8ef87ab9185a23d5676f2f7d986022d91bcde
CVE-2023-52450: kernel: intel: Fix NULL pointer dereference issue in upi_fill_topology()
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-22T00:00:00+00:00

A vulnerability was discovered in the Linux kernel in which certain CPU topologies could result in a null pointer dereference, affecting system stability.


Affected upstream versions: 6.2
Fixed upstream versions: 0, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: bf1bf09e6b599758851457f3999779622a48d015
CVE-2023-52451: kernel: powerpc: Fix access beyond end of drmem array
Component: kernel
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Public date: 2024-02-22T00:00:00+00:00

A flaw was found in the Linux kernel, specifically affecting the PowerPC architecture's pseries memory hotplug functionality. The issue arises from the dlpar_memory_remove_by_index() function, which may access memory beyond the bounds of the drmem logical memory block (LMB) array when it fails to find a matching entry for a given Dynamic Reconfiguration Connector (DRC) index. This out-of-bounds access can lead to unintended behavior, including potential system crashes or exposure of sensitive information.

Statement: The vulnerability was discovered through code inspection and confirmed using Kernel Address Sanitizer (KASAN) tools. To address this issue, the Linux kernel has been updated to ensure that failed lookups are logged separately, and pointers are dereferenced only when they point to valid entries.

Affected upstream versions: 4.1
Fixed upstream versions: 0, 4.19.306, 5.10.209, 5.15.148, 5.4.268, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: bb79613a9a704469ddb8d6c6029d532a5cea384c
CVE-2023-52455: kernel: iommu: Don't reserve 0-length IOVA region
Component: kernel
Severity: Low
CVSS v3: 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2024-02-23T00:00:00+00:00

A flaw was found in the Linux kernel. When the bootloader/firmware does not set up the framebuffers, the address and size are 0 in the "iommu-addresses" property. If the IOVA region is reserved with a 0 length, it corrupts the IOVA rbtree with an entry that has pfn_hi < pfn_lo. If the intent is to use the display driver in the kernel without the framebuffer, it causes the display IOMMU mappings to fail, as an entire valid IOVA space is reserved when the address and length are passed as 0. An ideal solution would be for the firmware to remove the "iommu-addresses" property and the corresponding "memory-region" if the display is not present. The kernel should be able to handle this by checking the size of the IOVA region and skipping the IOVA reservation if its size is 0. Also, add a warning if the firmware is requesting a 0-length IOVA region reservation.


Affected upstream versions: 6.3
Fixed upstream versions: 0, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 98b8a550da83cc392a14298c4b3eaaf0332ae6ad