In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fix missing update of domains_itree after splitting iopt_area
In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-64kUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-rtUpgrade perfUpgrade libperfUpgrade kernel-zfcpdump-modules | Nov 4, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade perfUpgrade libperfUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debug | Sep 17, 2024 | May 21, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-source-rtUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-amdUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-docs | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub