In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fix missing update of domains_itree after splitting iopt_area
In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade rvUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernelUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-devel | Nov 4, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade rvUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matched | Sep 17, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-symsUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade dtb-sprdUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kb | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub