CVE-2023-54174
Published: Dec 30, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd group->iommufd is not initialized for the iommufd_ctx_put() [20018.331541] BUG: kernel NULL pointer dereference, address: 0000000000000000 [20018.377508] RIP: 0010:iommufd_ctx_put+0x5/0x10 [iommufd] ... [20018.476483] Call Trace: [20018.479214] <TASK> [20018.481555] vfio_group_fops_unl_ioctl+0x506/0x690 [vfio] [20018.487586] __x64_sys_ioctl+0x6a/0xb0 [20018.491773] ? trace_hardirqs_on+0xc5/0xe0 [20018.496347] do_syscall_64+0x67/0x90 [20018.500340] entry_SYSCALL_64_after_hwframe+0x4b/0xb5
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 9eefba8002c27d65ab52a533fd0611b099b73591 - < 8f24eef598ce7cce0bbefe0ec642bcc031d0f528affected 9eefba8002c27d65ab52a533fd0611b099b73591 - < d649c34cb916b015fdcb487e51409fcc5caeca8d |
Linux | Linux | affected 6.2unaffected 0 - < 6.2unaffected 6.2.3 - <= 6.2.*unaffected 6.3 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now