CVE-2024-53232

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.

• CWE-416
• CWE-476
• CWE-416

• https://git.kernel.org/stable/c/3be34fa1cdbf180c1a948cfededfdf2cdc497199Patch
• https://git.kernel.org/stable/c/bd89d94f3ea6fdaee983cbc69226a00b9bde6d59Patch
• https://git.kernel.org/stable/c/ecda483339a5151e3ca30d6b82691ef6f1d17912Patch

Published

Dec 27, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53226In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53227In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-53228In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-53229In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53230In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53231In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53233In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53234In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53235In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53236In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-53237In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-53238In the Linux kernel, the following vulnerability has been re…5.5