In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix NULL domain on device release
In the kdump kernel, the IOMMU operates in deferred_attach mode. In this mode, info->domain may not yet be assigned by the time the release_device function is called. It leads to the following crash in the crash kernel:
BUG: kernel NULL pointer dereference, address: 000000000000003c ... RIP: 0010:do_raw_spin_lock+0xa/0xa0 ... _raw_spin_lock_irqsave+0x1b/0x30 intel_iommu_release_device+0x96/0x170 iommu_deinit_device+0x39/0xf0 __iommu_group_remove_device+0xa0/0xd0 iommu_bus_notifier+0x55/0xb0 notifier_call_chain+0x5a/0xd0 blocking_notifier_call_chain+0x41/0x60 bus_notify+0x34/0x50 device_del+0x269/0x3d0 pci_remove_bus_device+0x77/0x100 p2sb_bar+0xae/0x1d0 ... i801_probe+0x423/0x740
Use the release_domain mechanism to fix it. The scalable mode context entry which is not part of release domain should be cleared in release_device().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1006-ibm | Jul 1, 2024 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub