CVE-2024-36884: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-36884 affects the Linux kernel's IOMMU/ARM-SMMU subsystem. The vulnerability was discovered in the nvidia_smmu_context_fault() function where an incorrect type usage leads to a NULL pointer dereference. This issue was disclosed on May 30, 2024, and affects Linux kernel versions from 6.8 up to (excluding) 6.8.10 (NVD).

The vulnerability stems from a function pointer indirection issue in the nvidia_smmu_context_fault() function. The function was installed as an IRQ handler where 'void *' was changed to a struct arm_smmu_domain. Since the iommu_domain is embedded at a non-zero offset, this causes nvidia_smmu_context_fault() to miscompute the offset, resulting in a NULL pointer dereference. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (MEDIUM) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD, Kernel Patch).

The vulnerability can lead to a kernel NULL pointer dereference, potentially causing system crashes or denial of service conditions. The issue specifically affects systems using the NVIDIA SMMU (System Memory Management Unit) implementation in the Linux kernel (Kernel Patch).

The vulnerability requires local access with low privileges to exploit. It can be triggered during specific IOMMU operations involving the NVIDIA SMMU driver. No known exploits in the wild have been reported (NVD).

The vulnerability has been fixed in the Linux kernel through a patch that corrects the type usage in the nvidia_smmu_context_fault() function. Users should update their Linux kernel to version 6.8.10 or later to address this vulnerability (Kernel Patch).