In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Avoid memory allocation in iommu_suspend()
The iommu_suspend() syscore suspend callback is invoked with IRQ disabled. Allocating memory with the GFP_KERNEL flag may re-enable IRQs during the suspend callback, which can cause intermittent suspend/hibernation problems with the following kernel traces:
Calling iommu_suspend+0x0/0x1d0 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 15 at kernel/time/timekeeping.c:868 ktime_get+0x9b/0xb0 ... CPU: 0 PID: 15 Comm: rcu_preempt Tainted: G U E 6.3-intel #r1 RIP: 0010:ktime_get+0x9b/0xb0 ... Call Trace: <IRQ> tick_sched_timer+0x22/0x90 ? __pfx_tick_sched_timer+0x10/0x10 __hrtimer_run_queues+0x111/0x2b0 hrtimer_interrupt+0xfa/0x230 __sysvec_apic_timer_interrupt+0x63/0x140 sysvec_apic_timer_interrupt+0x7b/0xa0 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1f/0x30 ... ------------[ cut here ]------------ Interrupts enabled after iommu_suspend+0x0/0x1d0 WARNING: CPU: 0 PID: 27420 at drivers/base/syscore.c:68 syscore_suspend+0x147/0x270 CPU: 0 PID: 27420 Comm: rtcwake Tainted: G U W E 6.3-intel #r1 RIP: 0010:syscore_suspend+0x147/0x270 ... Call Trace: <TASK> hibernation_snapshot+0x25b/0x670 hibernate+0xcd/0x390 state_store+0xcf/0xe0 kobj_attr_store+0x13/0x30 sysfs_kf_write+0x3f/0x50 kernfs_fop_write_iter+0x128/0x200 vfs_write+0x1fd/0x3c0 ksys_write+0x6f/0xf0 __x64_sys_write+0x1d/0x30 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc
Given that only 4 words memory is needed, avoid the memory allocation in iommu_suspend().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.136-90.144Upgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools | Jul 9, 2024 | Mar 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.59-84.139Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-64kbUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade dtb-armUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-source | Mar 13, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-ibm-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-gcp-5.15Upgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-gkeUpgrade linux-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-nvidia-tegraUpgrade linux-bluefieldUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-oracleUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-realtimeUpgrade linux-awsUpgrade linuxUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gkeop-5.15Upgrade linux-raspiUpgrade linux-oracle-5.15Upgrade linux-nvidia-6.5Upgrade linux-lowlatencyUpgrade linux-aws-fipsUpgrade linux-aws-5.15Upgrade linux-gkeopUpgrade linux-azureUpgrade linux-azure-fde | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub