In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fix missing update of domains_itree after splitting iopt_area
In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernelUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade rv | Nov 4, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade libperf-debuginfoUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rtUpgrade libperfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-kvm | Sep 17, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-azureUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-default-base | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub