CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of the igroup lock during the vdevice size validation process in the iommufd_vdevice_alloc_ioctl() function. If the validation fails, the lock remains held, leading to a potential deadlock during subsequent vDEVICE operations, which could disrupt system functionality. Organizations utilizing Linux kernel versions that include this functionality should prioritize patching to prevent operational disruptions.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevice_size error path iommufd_vdevice_alloc_ioctl() takes idev->igroup->lock, then validates the driver's vdevice_size against the core structure size with a WARN_ON_ONCE. On failure that guard jumps to out_put_idev, below out_unlock_igroup, so it skips the mutex_unlock(), leaving the igroup lock held and deadlocking the next vDEVICE operation on that group. Jump to out_unlock_igroup instead.