In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: avoid putting an uninitialized iova_domain
The system will crash if we put an uninitialized iova_domain, this could happen when an error occurs before initializing the iova_domain in vdpasim_create().
BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:__cpuhp_state_remove_instance+0x96/0x1c0 ... Call Trace: <TASK> put_iova_domain+0x29/0x220 vdpasim_free+0xd1/0x120 [vdpa_sim] vdpa_release_dev+0x21/0x40 [vdpa] device_release+0x33/0x90 kobject_release+0x63/0x160 vdpasim_create+0x127/0x2a0 [vdpa_sim] vdpasim_net_dev_add+0x7d/0xfe [vdpa_sim_net] vdpa_nl_cmd_dev_add_set_doit+0xe1/0x1a0 [vdpa] genl_family_rcv_msg_doit+0x112/0x140 genl_rcv_msg+0xdf/0x1d0 ...
So we must make sure the iova_domain is already initialized before put it.
In addition, we may get the following warning in this case: WARNING: ... drivers/iommu/iova.c:344 iova_cache_put+0x58/0x70
So we must make sure the iova_cache_put() is invoked only if the iova_cache_get() is already invoked. Let's fix it together.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade dtb-armUpgrade dtb-renesasUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rt | Aug 9, 2024 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub