The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
vdpa_sim: avoid putting an uninitialized iova_domain
The system will crash if we put an uninitialized iova_domain, this could happen when an error occurs before initializing the iova_domain in vdpasim_create().
BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:__cpuhp_state_remove_instance+0x96/0x1c0 ... Call Trace: <TASK> put_iova_domain+0x29/0x220 vdpasim_free+0xd1/0x120 [vdpa_sim] vdpa_release_dev+0x21/0x40 [vdpa] device_release+0x33/0x90 kobject_release+0x63/0x160 vdpasim_create+0x127/0x2a0 [vdpa_sim] vdpasim_net_dev_add+0x7d/0xfe [vdpa_sim_net] vdpa_nl_cmd_dev_add_set_doit+0xe1/0x1a0 [vdpa] genl_family_rcv_msg_doit+0x112/0x140 genl_rcv_msg+0xdf/0x1d0 ...
So we must make sure the iova_domain is already initialized before put it.
In addition, we may get the following warning in this case: WARNING: ... drivers/iommu/iova.c:344 iova_cache_put+0x58/0x70
So we must make sure the iova_cache_put() is invoked only if the iova_cache_get() is already invoked. Let's fix it together.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-source-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-default | Aug 9, 2024 | May 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub