CVE-2022-48904: iommu/amd: Fix I/O page table memory leak
First published: Thu Aug 22 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix I/O page table memory leak The current logic updates the I/O page table mode for the domain before calling the logic to free memory used for the page table. This results in IOMMU page table memory leak, and can be observed when launching VM w/ pass-through devices. Fix by freeing the memory used for page table before updating the mode.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=5.12<5.15.27 | |
| Linux Kernel | >=5.16<5.16.13 | |
| Linux Kernel | =5.17-rc1 | |
| Linux Kernel | =5.17-rc2 | |
| Linux Kernel | =5.17-rc3 | |
| Linux Kernel | =5.17-rc4 | |
| Linux Kernel | =5.17-rc5 | |
| Linux Kernel | =5.17-rc6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-48904?
CVE-2022-48904 has a moderate severity rating due to potential memory leaks in the I/O page table management.
How do I fix CVE-2022-48904?
To fix CVE-2022-48904, update your Linux kernel to versions 5.15.27, 5.16.13, or any version above 5.17-rc6.
Which versions of the Linux kernel are affected by CVE-2022-48904?
CVE-2022-48904 affects the Linux kernel versions from 5.12 to 5.15.27 and the 5.17 release candidates.
What type of vulnerability is CVE-2022-48904?
CVE-2022-48904 is a vulnerability involving a memory leak in the IOMMU page table management.
Is CVE-2022-48904 a local or remote vulnerability?
CVE-2022-48904 is considered a local vulnerability that requires access to the affected system.
- agent/references
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- agent/weakness
- agent/severity
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.12
- version/linux kernel/5.16
- version/linux kernel/5.17-rc1
- version/linux kernel/5.17-rc2
- version/linux kernel/5.17-rc3
- version/linux kernel/5.17-rc4
- version/linux kernel/5.17-rc5
- version/linux kernel/5.17-rc6