SECUFOCUSNOW
Home›CVE index›CVE-2024-35814
Review reviewHigh

CVE-2024-35814

Linux Linux, linux_kernel, linux kernel

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb ("swiotlb: fix a braino in the alignment check fix"), which was a fix for commit 0eee5ae10256 ("swiotlb: fix slot alignment checks"), causes a functional regression with vsock in a virtual machine using bouncing via a restricted DMA SWIOTLB pool. When virtio allocates the virtqueues for the vsock device using dma_alloc_coherent(), the SWIOTLB search can return page-unaligned allocations if 'area->index' was left unaligned by a previ...

CVSS
8.8
EPSS
0.23%
14.3% percentile
CISA KEV
Not listed
Published
2024.05.17
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.23%
Technical severityCVSS 8.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb ("swiotlb: fix a braino in the alignment check fix"), which was a fix for commit 0eee5ae10256 ("swiotlb: fix slot alignment checks"), causes a functional regression with vsock in a virtual machine using bouncing via a restricted DMA SWIOTLB pool. When virtio allocates the virtqueues for the vsock device using dma_alloc_coherent(), the SWIOTLB search can return page-unaligned allocations if 'area->index' was left unaligned by a previ...

Affected product and versions

Product
Linux Linux, linux_kernel, linux kernel
Affected versions
>= 0eee5ae1025699ea93d44fdb6ef2365505082103 < 3e7acd6e25ba77dde48c3b721c54c89cd6a10534, >= 0eee5ae1025699ea93d44fdb6ef2365505082103 < c88668aa6c1da240ea3eb4d128b7906e740d3cb8, >= 0eee5ae1025699ea93d44fdb6ef2365505082103 < 777391743771040e12cc40d3d0d178f70c616491, >= 0eee5ae1025699ea93d44fdb6ef2365505082103 < 04867a7a33324c9c562ee7949dbcaab7aaad1fb4, >= 6.3, >= 0eee5ae10256 < 3e7acd6e25ba, >= 0eee5ae10256 < c88668aa6c1d, >= 0eee5ae10256 < 777391743771, >= 0eee5ae10256 < 04867a7a3332, >= 6.3 < 6.6.24, >= 6.7 < 6.7.12, >= 6.8 < 6.8.3
Fixed versions
6.6.24, 6.7.12, 6.8.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux_kernel, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE
CWE-1055, CWE-119, CWE-415
CVE-2024-35814 — Linux Linux, linux_kernel, linux kernel | SECUFOCUS NOW