CVE-2023-52484

In arm_smmu_v3 (part of the Linux IOMMU/SMMU driver), there’s a bug in the function arm_smmu_mm_invalidate_range (or its renamed variant) that can trigger a soft lockup, meaning the CPU gets stuck executing without making progress. The issue arises when flushing/invalidating TLB (translation lookaside buffer) ranges: there’s no limit enforced for the number of per-page TLBI (TLB invalidation) operations, unlike in the CPU MMU path which has MAX_TLBI_OPS. This allows extremely large or many invalidation requests to overwhelm the arm_smmu command queue, causing it to spin or stall.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.