---
id: CVE-2023-54043
title: 'iommufd: Do not add the same hwpt to the ioas->hwpt_list twice'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommufd: Do not add the same hwpt to the ioas->hwpt_list twice

  The hwpt is added to the hwpt_list only during its creation, it is never
  added again. This hunk is some …
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e8d57210035b6377d424ba964961892d01127cf6 <
    c44adefdcf472f946f0632f4e0ddcbf3e00b8516
  - >-
    Linux >= e8d57210035b6377d424ba964961892d01127cf6 <
    b4ff830eca097df51af10a9be29e8cc817327919
  - Linux 6.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:38:00.478369Z'
published: '2025-12-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:41:38.411Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-54043'
references:
  - url: 'https://git.kernel.org/stable/c/c44adefdcf472f946f0632f4e0ddcbf3e00b8516'
  - url: 'https://git.kernel.org/stable/c/b4ff830eca097df51af10a9be29e8cc817327919'
tags:
  - cve.org
epss: 0.00184
epssPercentile: 0.07488
ingestedAt: '2026-10-15T22:48:25.427Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Do not add the same hwpt to the ioas->hwpt_list twice

The hwpt is added to the hwpt_list only during its creation, it is never
added again. This hunk is some missed leftover from rework. Adding it
twice will corrupt the linked list in some cases.

It effects HWPT specific attachment, which is something the test suite
cannot cover until we can create a legitimate struct device with a
non-system iommu "driver" (ie we need the bus removed from the iommu code)

## Affected

- `Linux >= e8d57210035b6377d424ba964961892d01127cf6 < c44adefdcf472f946f0632f4e0ddcbf3e00b8516`
- `Linux >= e8d57210035b6377d424ba964961892d01127cf6 < b4ff830eca097df51af10a9be29e8cc817327919`
- `Linux 6.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.