CVE-2024-56669

Summary

[CVE-2024-56669] is a vulnerability affecting the Linux kernel's IOMMU/VT-d subsystem. The issue arises due to the current implementation removing cache tags after disabling Address Translation Service (ATS). This sequence of events can result in memory leaks and kernel crashes, especially when multiple Virtual Functions (VFs) from different Processor Functions (PFs) are passed through to a single user-space process via vfio-pci. Specifically, CACHE_TAG_DEVTLB type cache tags may persist in the list even after the domain is freed, leading to a use-after-free condition. The vulnerability can manifest in a kernel crash with messages like "KERNEL NULL pointer dereference". To mitigate this issue, the order of function calls in cache_tag_unassign_domain() and iommu_disable_pci_caps() should be reversed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.