Review reviewHigh

CVE-2024-56669

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cache tags after disabling ATS, leading to potential memory leaks and kernel crashes. Specifically, CACHE_TAG_DEVTLB type cache tags may still remain in the list even after the domain is freed, causing a use-after-free condition. This issue really shows up when multiple VFs from different PFs passed through to a single user-space process via vfio-pci. In such cases, the kernel may crash with kernel messages like: BUG: kernel NULL pointer d...

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2024.12.28

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 3b1d9e2b2d6856eabf5faa12d20c97fef657999f < 9a0a72d3ed919ebe6491f527630998be053151d8, >= 3b1d9e2b2d6856eabf5faa12d20c97fef657999f < 1f2557e08a617a4b5e92a48a1a9a6f86621def18, >= 6.10, >= 6.10 < 6.12.6, 6.13
Fixed versions: 6.12.6

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-401, CWE-416, CWE-476