CVE-2024-50101

iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices

State: Published
Severity: 7.8 High
Published: Nov 5, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices

Previously, the domain_context_clear() function incorrectly called pci_for_each_dma_alias() to set up context entries for non-PCI devices. This could lead to kernel hangs or other unexpected behavior.

Add a check to only call pci_for_each_dma_alias() for PCI devices. For non-PCI devices, domain_context_clear_one() is called directly.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9807860f6ad446459d0446550cf4a2dc23bbee6c to before 0bd9a30c22afb5da203386b811ec31429d2caa78Affected 59862b869275c27beb25cda2054b59a8b5d04970 to before cbfa3a83eba05240ce37839ed48280a05e8e8f6cAffected 48f2183a4f9d3540fc5cfc8f8451621ee92c09f8 to before fe2e0b6cd00abea3efac66de1da22d844364c1b0Affected 9a16ab9d640274b20813d2d17475e18d3e99d834 to before 04d6826ba7ba81213422276e96c90c6565169e1cAffected 9a16ab9d640274b20813d2d17475e18d3e99d834 to before 6e02a277f1db24fa039e23783c8921c7b0e5b1b3Affected 5.15.142 to before 5.15.169Affected 6.1.66 to before 6.1.114Affected 6.6.5 to before 6.6.58Affected
LinuxLinux	6.7Affected before 6.7Not affected 5.15.169 through 5.15.Not affected 6.1.114 through 6.1.Not affected 6.6.58 through 6.6.Not affected 6.11.5 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

9807860f6ad446459d0446550cf4a2dc23bbee6c to before 0bd9a30c22afb5da203386b811ec31429d2caa78Affected
59862b869275c27beb25cda2054b59a8b5d04970 to before cbfa3a83eba05240ce37839ed48280a05e8e8f6cAffected
48f2183a4f9d3540fc5cfc8f8451621ee92c09f8 to before fe2e0b6cd00abea3efac66de1da22d844364c1b0Affected
9a16ab9d640274b20813d2d17475e18d3e99d834 to before 04d6826ba7ba81213422276e96c90c6565169e1cAffected
9a16ab9d640274b20813d2d17475e18d3e99d834 to before 6e02a277f1db24fa039e23783c8921c7b0e5b1b3Affected
5.15.142 to before 5.15.169Affected
6.1.66 to before 6.1.114Affected
6.6.5 to before 6.6.58Affected

LinuxLinux

6.7Affected
before 6.7Not affected
5.15.169 through 5.15.*Not affected
6.1.114 through 6.1.*Not affected
6.6.58 through 6.6.*Not affected
6.11.5 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.