Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Eric Badger

Researcher fromPure Storage
#46107of 53,634
5.5Total CVSS
Vulnerabilities · 1
PT-2024-3376
5.5
2024-03-06
Linux · Linux Kernel · CVE-2024-27079
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the iommu/vt-d component. This occurs when the IOMMU operates in deferred attach mode and the `info->domain` may not be assigned by the time the `release device` function is called, leading to a crash in the crash kernel. The scalable mode context entry not part of the release domain should be cleared in `release device()` to fix the issue. The vulnerability can be exploited to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.