In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Use device rbtree in iopf reporting path
The existing I/O page fault handler currently locates the PCI device by calling pci_get_domain_bus_and_slot(). This function searches the list of all PCI devices until the desired device is found. To improve lookup efficiency, replace it with device_rbtree_find() to search the device within the probed device rbtree.
The I/O page fault is initiated by the device, which does not have any synchronization mechanism with the software to ensure that the device stays in the probed device tree. Theoretically, a device could be released by the IOMMU subsystem after device_rbtree_find() and before iopf_get_dev_fault_param(), which would cause a use-after-free problem.
Add a mutex to synchronize the I/O page fault reporting path and the IOMMU release device path. This lock doesn't introduce any performance overhead, as the conflict between I/O page fault reporting and device releasing is very rare.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dtb-qcomUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade dtb-appleUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-mediatek | Jul 23, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-ibm-classic | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub