Threats Tagged 'ghsa-gr72-p8g3-6gpc'

A vulnerability in the Linux kernel's iommufd component involved memory allocation for vevent queues occurring inside a spinlock. This design allowed user space to specify large queue depths, potentially exhausting atomic memory reserves. The issue was addressed by moving the memory allocation outside the spinlock and using GFP_NOWAIT to avoid atomic memory exhaustion. On allocation failure, the kernel signals the event drop to user space and returns an error code. This fix distinguishes between queue overflow (a normal condition) and memory allocation failure (a kernel error). Future changes will limit the maximum vevent queue depth.