CVE-2024-27066

A vulnerability was found in the Linux kernel's virtio virtio_ring.c driver, which can lead to memory leakage caused by improper checks. This issue can occur when use_dma_api and premapped are true, causing do_unmap to be false, preventing the detach_buf_packed() function from calling vring_unmap_extra_packed(), leaving the indirect description table mapped. This can lead to resource exhaustion over time.

This vulnerability is rated as having a Moderate impact because exploitation requires local access and the affected code path is not exercised by in-tree drivers, limiting the practical risk to memory resource exhaustion. Supported releases of Red Hat Enterprise Linux do not incorporate the upstream changes that introduced this flaw and are not affected. In configurations where the vulnerable logic is present, standard virtualized operations are unlikely to trigger the condition under typical workloads.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.