CVE-2024-50101

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices

Previously, the domain_context_clear() function incorrectly called pci_for_each_dma_alias() to set up context entries for non-PCI devices. This could lead to kernel hangs or other unexpected behavior.

Add a check to only call pci_for_each_dma_alias() for PCI devices. For non-PCI devices, domain_context_clear_one() is called directly.

A flaw of Low impact was found in the Linux kernel's Intel VT-d IOMMU implementation. The domain_context_clear() function incorrectly called pci_for_each_dma_alias() for non-PCI devices when handling context entries, which could lead to kernel hangs or other unexpected behavior. On systems using Intel VT-d, a local user with the privileges required to reach this device handling path could use this flaw to cause a denial of service; confidentiality and integrity are not affected. For this reason Red Hat's severity (CVSS 5.5, local attack vector requiring privileges, availability impact only) is lower than the upstream CVE.org score of 7.8, which assumes combined confidentiality, integrity, and availability impact. In Red Hat Enterprise Linux 9, the kernel and kernel-rt components are affected: a fix is being pursued for RHEL 9.6, while the fix for the RHEL 9.5.z update stream was deferred given the low impact of the issue, leaving a residual risk of a local denial of service on Intel VT-d systems with non-PCI devices. Red Hat Enterprise Linux 6, 7, and 8 update streams (kernel and kernel-rt) and the Hosted OpenShift (ARO and OSD) offerings are not affected; the Fedora community kernel is affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.