In the Linux kernel, the following vulnerability has been resolved:
powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE
At the time of LPAR boot up, partition firmware provides Open Firmware property ibm,dma-window for the PE. This property is provided on the PCI bus the PE is attached to.
There are execptions where the partition firmware might not provide this property for the PE at the time of LPAR boot up. One of the scenario is where the firmware has frozen the PE due to some error condition. This PE is frozen for 24 hours or unless the whole system is reinitialized.
Within this time frame, if the LPAR is booted, the frozen PE will be presented to the LPAR but ibm,dma-window property could be missing.
Today, under these circumstances, the LPAR oopses with NULL pointer dereference, when configuring the PCI bus the PE is attached to.
BUG: Kernel NULL pointer dereference on read at 0x000000c8 Faulting instruction address: 0xc0000000001024c0 Oops: Kernel access of bad area, sig: 7 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries Modules linked in: Supported: Yes CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.4.0-150600.9-default #1 Hardware name: IBM,9043-MRX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NM1060_023) hv:phyp pSeries NIP: c0000000001024c0 LR: c0000000001024b0 CTR: c000000000102450 REGS: c0000000037db5c0 TRAP: 0300 Not tainted (6.4.0-150600.9-default) MSR: 8000000002009033 <SF,VEC,EE,ME,IR,DR,RI,LE> CR: 28000822 XER: 00000000 CFAR: c00000000010254c DAR: 00000000000000c8 DSISR: 00080000 IRQMASK: 0 ... NIP [c0000000001024c0] pci_dma_bus_setup_pSeriesLP+0x70/0x2a0 LR [c0000000001024b0] pci_dma_bus_setup_pSeriesLP+0x60/0x2a0 Call Trace: pci_dma_bus_setup_pSeriesLP+0x60/0x2a0 (unreliable) pcibios_setup_bus_self+0x1c0/0x370 __of_scan_bus+0x2f8/0x330 pcibios_scan_phb+0x280/0x3d0 pcibios_init+0x88/0x12c do_one_initcall+0x60/0x320 kernel_init_freeable+0x344/0x3e4 kernel_init+0x34/0x1d0 ret_from_kernel_user_thread+0x14/0x1c
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-marvellUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade ocfs2-kmp-64kb | Jun 13, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-genericUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-oracleUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gke | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub