CVE-2024-26977

pci_iounmap(): Fix MMIO mapping leak

State: Published
Severity: 5.5 Medium
Published: May 1, 2024
Updated: May 11, 2026
Reserved: Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pci_iounmap(): Fix MMIO mapping leak

The #ifdef ARCH_HAS_GENERIC_IOPORT_MAP accidentally also guards iounmap(), which means MMIO mappings are leaked.

Move the guard so we call iounmap() for MMIO mappings.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	316e8d79a0959c302b0c462ab64b069599f10eef to before 5e4b23e7a7b33a1e56bfa3e5598138a2234d55b6Affected 316e8d79a0959c302b0c462ab64b069599f10eef to before 6d21d0356aa44157a62e39c0d1a13d4c69a8d0c8Affected 316e8d79a0959c302b0c462ab64b069599f10eef to before b5d40f02e7222da032c2042aebcf2a07de9b342fAffected 316e8d79a0959c302b0c462ab64b069599f10eef to before f3749345a9b7295dd071d0ed589634cb46364f77Affected 316e8d79a0959c302b0c462ab64b069599f10eef to before af280e137e273935f2e09f4d73169998298792edAffected 316e8d79a0959c302b0c462ab64b069599f10eef to before 7626913652cc786c238e2dd7d8740b17d41b2637Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.154 through 5.15.Not affected 6.1.84 through 6.1.Not affected 6.6.24 through 6.6.Not affected 6.7.12 through 6.7.Not affected 6.8.3 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

316e8d79a0959c302b0c462ab64b069599f10eef to before 5e4b23e7a7b33a1e56bfa3e5598138a2234d55b6Affected
316e8d79a0959c302b0c462ab64b069599f10eef to before 6d21d0356aa44157a62e39c0d1a13d4c69a8d0c8Affected
316e8d79a0959c302b0c462ab64b069599f10eef to before b5d40f02e7222da032c2042aebcf2a07de9b342fAffected
316e8d79a0959c302b0c462ab64b069599f10eef to before f3749345a9b7295dd071d0ed589634cb46364f77Affected
316e8d79a0959c302b0c462ab64b069599f10eef to before af280e137e273935f2e09f4d73169998298792edAffected
316e8d79a0959c302b0c462ab64b069599f10eef to before 7626913652cc786c238e2dd7d8740b17d41b2637Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.154 through 5.15.*Not affected
6.1.84 through 6.1.*Not affected
6.6.24 through 6.6.*Not affected
6.7.12 through 6.7.*Not affected
6.8.3 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.