PT-2024-32766 · Linux+5 · Linux Kernel+5
Published
2024-09-05
·
Updated
2025-09-29
·
CVE-2024-47719
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
The issue is related to the iommufd component in the Linux kernel, where an overflow of the ALIGN() function during iova allocation can occur. This happens when userspace supplies an iova and uptr such that the target iova alignment becomes very large, causing the ALIGN() function to overflow and corrupt the selected area range during allocation. The CONFIG IOMMUFD TEST configuration can detect this issue. The problem can lead to fragmentation and consumption of the available IOVA space without any reason.
Recommendations
Update to Linux kernel version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the use of the iommufd component until a patch is available.
Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu