---
id: CVE-2023-54043
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommufd: Do not add the same hwpt to the ioas->hwpt_list twice

  The hwpt is added to the hwpt_list only during its creation, it is never
  added again
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommufd: Do not add the same hwpt to the ioas->hwpt_list twice

  The hwpt is added to the hwpt_list only during its creation, it is never
  added again. This hunk is some …
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e8d57210035b6377d424ba964961892d01127cf6 <
    c44adefdcf472f946f0632f4e0ddcbf3e00b8516
  - >-
    Linux >= e8d57210035b6377d424ba964961892d01127cf6 <
    b4ff830eca097df51af10a9be29e8cc817327919
  - Linux 6.2
published: '2025-12-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:51.360'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-54043'
references:
  - url: 'https://git.kernel.org/stable/c/b4ff830eca097df51af10a9be29e8cc817327919'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c44adefdcf472f946f0632f4e0ddcbf3e00b8516'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00184
epssPercentile: 0.07957
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:38:00.478369Z'
ingestedAt: '2026-10-15T22:48:25.427Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Do not add the same hwpt to the ioas->hwpt_list twice

The hwpt is added to the hwpt_list only during its creation, it is never
added again. This hunk is some missed leftover from rework. Adding it
twice will corrupt the linked list in some cases.

It effects HWPT specific attachment, which is something the test suite
cannot cover until we can create a legitimate struct device with a
non-system iommu "driver" (ie we need the bus removed from the iommu code)

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.