In the Linux kernel, the following vulnerability has been resolved:
dma-mapping: benchmark: fix node id validation
While validating node ids in map_benchmark_ioctl(), node_possible() may be provided with invalid argument outside of [0,MAX_NUMNODES-1] range leading to:
BUG: KASAN: wild-memory-access in map_benchmark_ioctl (kernel/dma/map_benchmark.c:214) Read of size 8 at addr 1fffffff8ccb6398 by task dma_map_benchma/971 CPU: 7 PID: 971 Comm: dma_map_benchma Not tainted 6.9.0-rc6 #37 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Call Trace: <TASK> dump_stack_lvl (lib/dump_stack.c:117) kasan_report (mm/kasan/report.c:603) kasan_check_range (mm/kasan/generic.c:189) variable_test_bit (arch/x86/include/asm/bitops.h:227) [inline] arch_test_bit (arch/x86/include/asm/bitops.h:239) [inline] _test_bit at (include/asm-generic/bitops/instrumented-non-atomic.h:142) [inline] node_state (include/linux/nodemask.h:423) [inline] map_benchmark_ioctl (kernel/dma/map_benchmark.c:214) full_proxy_unlocked_ioctl (fs/debugfs/file.c:333) __x64_sys_ioctl (fs/ioctl.c:890) do_syscall_64 (arch/x86/entry/common.c:83) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)
Compare node ids with sane bounds first. NUMA_NO_NODE is considered a special valid case meaning that benchmarking kthreads won't be bound to a cpuset of a given node.
Found by Linux Verification Center (linuxtesting.org).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch | Jul 23, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64k | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub