In the Linux kernel, the following vulnerability has been resolved:
dma-mapping: benchmark: fix node id validation
While validating node ids in map_benchmark_ioctl(), node_possible() may be provided with invalid argument outside of [0,MAX_NUMNODES-1] range leading to:
BUG: KASAN: wild-memory-access in map_benchmark_ioctl (kernel/dma/map_benchmark.c:214) Read of size 8 at addr 1fffffff8ccb6398 by task dma_map_benchma/971 CPU: 7 PID: 971 Comm: dma_map_benchma Not tainted 6.9.0-rc6 #37 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Call Trace: <TASK> dump_stack_lvl (lib/dump_stack.c:117) kasan_report (mm/kasan/report.c:603) kasan_check_range (mm/kasan/generic.c:189) variable_test_bit (arch/x86/include/asm/bitops.h:227) [inline] arch_test_bit (arch/x86/include/asm/bitops.h:239) [inline] _test_bit at (include/asm-generic/bitops/instrumented-non-atomic.h:142) [inline] node_state (include/linux/nodemask.h:423) [inline] map_benchmark_ioctl (kernel/dma/map_benchmark.c:214) full_proxy_unlocked_ioctl (fs/debugfs/file.c:333) __x64_sys_ioctl (fs/ioctl.c:890) do_syscall_64 (arch/x86/entry/common.c:83) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)
Compare node ids with sane bounds first. NUMA_NO_NODE is considered a special valid case meaning that benchmarking kthreads won't be bound to a cpuset of a given node.
Found by Linux Verification Center (linuxtesting.org).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdso | Jul 23, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1072-azure | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub