iommu/amd: Fix I/O page table memory leak (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 11 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix I/O page table memory leak The current logic updates the I/O page table mode for the domain before calling the logic to free memory used for the page table. This results in IOMMU page table memory leak, and can be observed when launching VM w/ pass-through devices. Fix by freeing the memory used for page table before updating the mode.
Weaknesses (CWE)
- CWE-401 — Missing Release of Memory after Effective Lifetime
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-53783
- GCVE · GCVE-0-2022-48904
CERT-FR advisories
- CERTFR-2024-AVI-0840 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0822 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0779 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.12 < 5.15.27cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 5.16.13cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.17:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.17:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.17:rc6:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected e42ba0633064ef23eb1c8c21edf96bac1541bd4b < 378e2fe1eb58d5c2ed55c8fe5e11f9db5033cdd6 ; affected e42ba0633064ef23eb1c8c21edf96bac1541bd4b < c78627f757e37c2cf386b59c700c4e1574988597 ; affected e42ba0633064ef23eb1c8c21edf96bac1541bd4b < 6b0b2d9a6a308bcd9300c2d83000a82812c56cea |
| Linux · Linux | affected 5.12 ; unaffected 0 < 5.12 ; unaffected 5.15.27 ≤ 5.15.* ; unaffected 5.16.13 ≤ 5.16.* ; unaffected 5.17 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |