Input validation error in Linux kernel - CVE-2024-44994

Vulnerability identifier: #VU96886

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-44994

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the iommu_report_device_fault() function in drivers/iommu/io-pgfault.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for ARM 64
openEuler
OpenShift Logging
kernel (Red Hat package)
kernel-tools
python3-perf-debuginfo
python3-perf
perf-debuginfo
perf
kernel-tools-devel
kernel-tools-debuginfo
kernel
kernel-source
kernel-headers
kernel-devel
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
bpftool

Install update from vendor's website.

Linux kernel - addressed in versions 6.10.7, 6.11
OpenShift Logging - update to 5.8.17
kernel (Red Hat package) - update to 5.14.0-503.16.1.el9_5
kernel-tools - update to 6.6.0-44.0.0.50
python3-perf-debuginfo - update to 6.6.0-44.0.0.50
python3-perf - update to 6.6.0-44.0.0.50
perf-debuginfo - update to 6.6.0-44.0.0.50
perf - update to 6.6.0-44.0.0.50
kernel-tools-devel - update to 6.6.0-44.0.0.50
kernel-tools-debuginfo - update to 6.6.0-44.0.0.50
kernel - update to 6.6.0-44.0.0.50
kernel-source - update to 6.6.0-44.0.0.50
kernel-headers - update to 6.6.0-44.0.0.50
kernel-devel - update to 6.6.0-44.0.0.50
kernel-debugsource - update to 6.6.0-44.0.0.50
kernel-debuginfo - update to 6.6.0-44.0.0.50
bpftool-debuginfo - update to 6.6.0-44.0.0.50
bpftool - update to 6.6.0-44.0.0.50

• https://git.kernel.org/stable/c/cc6bc2ab1663ec9353636416af22452b078510e9
• https://git.kernel.org/stable/c/fca5b78511e98bdff2cdd55c172b23200a7b3404
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10.7
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11

• Input validation error in Linux kernel iommu driver
• openEuler 24.03 LTS update for kernel
• Red Hat Enterprise Linux 9 update for kernel
• Multiple vulnerabilities in OpenShift Logging 5.8