In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fix missing update of domains_itree after splitting iopt_area
In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-64k-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-64k-debug-coreUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade libperfUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel | Nov 4, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade rv | Sep 17, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade dtb-amazon | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub