CVE-2024-35814

In the Linux kernel, the following vulnerability has been resolved:

swiotlb: Fix double-allocation of slots due to broken alignment handling

The Linux kernel CVE team has assigned CVE-2024-35814 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051742-CVE-2024-35814-98c7@gregkh/T

This vulnerability is rated as having a Low severity impact because it primarily leads to a system crash or hang under specific virtual machine configurations utilizing restricted software I/O translation buffers. Exploitation requires driver-level memory allocations in guest environments, restricting the blast radius to a localized denial of service rather than arbitrary code execution or privilege escalation. Systems not configured with restricted bounce buffering are unaffected by this condition during standard operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.