In the Linux kernel, the following vulnerability has been resolved:
swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y
Using restricted DMA pools (CONFIG_DMA_RESTRICTED_POOL=y) in conjunction with dynamic SWIOTLB (CONFIG_SWIOTLB_DYNAMIC=y) leads to the following crash when initialising the restricted pools at boot-time:
| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 | Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP | pc : rmem_swiotlb_device_init+0xfc/0x1ec | lr : rmem_swiotlb_device_init+0xf0/0x1ec | Call trace: | rmem_swiotlb_device_init+0xfc/0x1ec | of_reserved_mem_device_init_by_idx+0x18c/0x238 | of_dma_configure_id+0x31c/0x33c | platform_dma_configure+0x34/0x80
faddr2line reveals that the crash is in the list validation code:
include/linux/list.h:83 include/linux/rculist.h:79 include/linux/rculist.h:106 kernel/dma/swiotlb.c:306 kernel/dma/swiotlb.c:1695
because add_mem_pool() is trying to list_add_rcu() to a NULL 'mem->pools'.
Fix the crash by initialising the 'mem->pools' list_head in rmem_swiotlb_device_init() before calling add_mem_pool().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-raspiUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-virtualUpgrade linux-image-ibm | Aug 9, 2024 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub