CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix NULL domain on device release
In the kdump kernel, the IOMMU operates in deferredattach mode. In this mode, info->domain may not yet be assigned by the time the releasedevice function is called. It leads to the following crash in the crash kernel:
BUG: kernel NULL pointer dereference, address: 000000000000003c ... RIP: 0010:dorawspinlock+0xa/0xa0 ... rawspinlockirqsave+0x1b/0x30 inteliommureleasedevice+0x96/0x170 iommudeinitdevice+0x39/0xf0 iommugroupremovedevice+0xa0/0xd0 iommubusnotifier+0x55/0xb0 notifiercallchain+0x5a/0xd0 blockingnotifiercallchain+0x41/0x60 busnotify+0x34/0x50 devicedel+0x269/0x3d0 pciremovebusdevice+0x77/0x100 p2sbbar+0xae/0x1d0 ... i801probe+0x423/0x740
Use the releasedomain mechanism to fix it. The scalable mode context entry which is not part of release domain should be cleared in releasedevice().
Other sources
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix NULL domain on device release
The Linux kernel CVE team has assigned CVE-2024-27079 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050134-CVE-2024-27079-f478@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27079?
CVE-2024-27079 has a high severity rating due to its impact on the Linux kernel's IOMMU functionality.
How do I fix CVE-2024-27079?
To fix CVE-2024-27079, update the kernel package to version 6.8.2, 6.9, or the specified versions for Debian distributions.
What systems are affected by CVE-2024-27079?
CVE-2024-27079 affects specific versions of the Red Hat kernel and Debian Linux packages related to the IOMMU.
What are the implications of CVE-2024-27079?
CVE-2024-27079 can lead to unauthorized access or system instability by improperly handling device releases in the IOMMU.
Is there a workaround for CVE-2024-27079 before applying the fix?
There are no known effective workarounds for CVE-2024-27079, and applying the kernel update is recommended.