CVE-2024-26977: pci_iounmap(): Fix MMIO mapping leak

Published May 1, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

pciiounmap(): Fix MMIO mapping leak

The #ifdef ARCHHASGENERICIOPORTMAP accidentally also guards iounmap(), which means MMIO mappings are leaked.

Move the guard so we call iounmap() for MMIO mappings.

Affected Software

18 affected componentsFixes available
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Linux Linux kernel>=5.15.1<5.15.154
Linux Linux kernel>=5.16<6.1.84
Linux Linux kernel>=6.2<6.6.24
Linux Linux kernel>=6.7<6.7.12
Linux Linux kernel>=6.8<6.8.3
Linux Linux kernel=5.15
Linux Linux kernel=5.15-rc2
Linux Linux kernel=5.15-rc3
Linux Linux kernel=5.15-rc4
Linux Linux kernel=5.15-rc5
Linux Linux kernel=5.15-rc6
Linux Linux kernel=5.15-rc7
Microsoft azl3 hyperv-daemons 6.6.35.1-1
Microsoft cbl2 hyperv-daemons 5.15.153.1-1
Microsoft cbl2 hyperv-daemons 5.15.153.1-1
Microsoft azl3 hyperv-daemons 6.6.22.1-2
Microsoft cbl2 hyperv-daemons 5.15.158.1-1

Event History

May 1, 2024
CVE Published
via MITRE·05:20 AM
Data Sourced
via MITRE·05:20 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverity
Data Sourced
via NVD·06:15 AM
RemedyAffected Software
May 13, 2024
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Jun 8, 2024
Data Sourced
via Launchpad·01:11 AM
Description
May 2, 2025
Data Sourced
via Ubuntu·02:23 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-26977?

The severity of CVE-2024-26977 is classified as moderate due to the potential for MMIO mapping leaks.

2

How do I fix CVE-2024-26977?

To fix CVE-2024-26977, update to the fixed versions of the Linux kernel, such as 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.

3

Which software is affected by CVE-2024-26977?

CVE-2024-26977 affects various versions of the Linux kernel, specifically those associated with Debian.

4

What does CVE-2024-26977 affect in the Linux kernel?

CVE-2024-26977 affects the handling of MMIO (Memory-Mapped Input/Output) mappings leading to potential leaks.

5

Is there a specific patch for CVE-2024-26977?

Yes, a patch that resolves the MMIO mapping leak in CVE-2024-26977 has been implemented in the newer versions of the Linux kernel.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203