In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fix missing update of domains_itree after splitting iopt_area
In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-64k-coreUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64kUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-rt-devel | Nov 4, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade rvUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade libperfUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matched | Sep 17, 2024 | May 21, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-debug-vdsoUpgrade dtb-hisilicon | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub