In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Avoid memory allocation in iommu_suspend()
The iommu_suspend() syscore suspend callback is invoked with IRQ disabled. Allocating memory with the GFP_KERNEL flag may re-enable IRQs during the suspend callback, which can cause intermittent suspend/hibernation problems with the following kernel traces:
Calling iommu_suspend+0x0/0x1d0 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 15 at kernel/time/timekeeping.c:868 ktime_get+0x9b/0xb0 ... CPU: 0 PID: 15 Comm: rcu_preempt Tainted: G U E 6.3-intel #r1 RIP: 0010:ktime_get+0x9b/0xb0 ... Call Trace: <IRQ> tick_sched_timer+0x22/0x90 ? __pfx_tick_sched_timer+0x10/0x10 __hrtimer_run_queues+0x111/0x2b0 hrtimer_interrupt+0xfa/0x230 __sysvec_apic_timer_interrupt+0x63/0x140 sysvec_apic_timer_interrupt+0x7b/0xa0 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1f/0x30 ... ------------[ cut here ]------------ Interrupts enabled after iommu_suspend+0x0/0x1d0 WARNING: CPU: 0 PID: 27420 at drivers/base/syscore.c:68 syscore_suspend+0x147/0x270 CPU: 0 PID: 27420 Comm: rtcwake Tainted: G U W E 6.3-intel #r1 RIP: 0010:syscore_suspend+0x147/0x270 ... Call Trace: <TASK> hibernation_snapshot+0x25b/0x670 hibernate+0xcd/0x390 state_store+0xcf/0xe0 kobj_attr_store+0x13/0x30 sysfs_kf_write+0x3f/0x50 kernfs_fop_write_iter+0x128/0x200 vfs_write+0x1fd/0x3c0 ksys_write+0x6f/0xf0 __x64_sys_write+0x1d/0x30 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc
Given that only 4 words memory is needed, avoid the memory allocation in iommu_suspend().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.136-90.144Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perf-debuginfo | Jul 9, 2024 | Mar 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.59-84.139Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpf-devel | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade dtb-mediatek | Mar 13, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-fipsUpgrade linux-azure-5.15Upgrade linux-bluefieldUpgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-ibm-5.15Upgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-xilinx-zynqmpUpgrade linux-realtimeUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-nvidia-6.5Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-gkeop-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-awsUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-azure-fde | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub