In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fix missing update of domains_itree after splitting iopt_area
In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-coreUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade python3-perfUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-devel-matched | Nov 4, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade libperfUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade rtlaUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-core | Sep 17, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-sourceUpgrade dtb-armUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-vanilla | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub