CVE-2024-27066: virtio: packed: fix unmap leak for indirect desc table
In the Linux kernel, the following vulnerability has been resolved:
virtio: packed: fix unmap leak for indirect desc table
When usedmaapi and premapped are true, then the dounmap is false.
Because the dounmap is false, vringunmapextrapacked is not called by detachbufpacked.
if (unlikely(vq->dounmap)) { curr = id; for (i = 0; i < state->num; i++) { vringunmapextrapacked(vq, &vq->packed.descextra[curr]); curr = vq->packed.descextra[curr].next; } }
So the indirect desc table is not unmapped. This causes the unmap leak.
So here, we check vq->usedmaapi instead. Synchronously, dma info is updated based on usedmaapi judgment
This bug does not occur, because no driver use the premapped with indirect.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27066?
CVE-2024-27066 has a medium severity rating due to potential information leakage and resource management issues in the Linux kernel.
How do I fix CVE-2024-27066?
To fix CVE-2024-27066, update the Linux kernel to the patched versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which versions of Linux are affected by CVE-2024-27066?
CVE-2024-27066 affects various versions of the Linux kernel prior to the mentioned patched versions.
What impact does CVE-2024-27066 have on system performance?
CVE-2024-27066 could potentially impact system resource management, leading to decreased performance under specific configurations.
Is CVE-2024-27066 a remote or local vulnerability?
CVE-2024-27066 is primarily a local vulnerability, requiring access to the affected system to exploit.