CVE-2021-47035

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When the first level page table is used for IOVA translation, it only supports Read-Only and Read-Write permissions. The Write-Only permission is not supported as t...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When the first level page table is used for IOVA translation, it only supports Read-Only and Read-Write permissions. The Write-Only permission is not supported as t...

CVE-2021-47035 iommu/vt-d: Remove WO permissions on second-level paging entries

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When the first level page table is used for IOVA translation, it only supports Read-Only and Read-Write permissions. The Write-Only permission is not supported as t...

CVE-2021-47035

CVE-2021-47035 is rejected and not an active vulnerability entry.

CVE-2021-47035

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When the first level page table is used for IOVA translation, it only supports Read-Only and Read-Write permissions. The Write-Only permission is not supported as t...

Fedora 39 : xen (2024-e527e6fd08)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e527e6fd08 advisory. arm32: The cache may not be properly cleaned/invalidated take two XSA-447, CVE-2023-46837 pci: phantom functions assigned to incorrect contexts...

Fedora 38 : xen (2024-4b2cf8c375)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4b2cf8c375 advisory. arm32: The cache may not be properly cleaned/invalidated take two XSA-447, CVE-2023-46837 pci: phantom functions assigned to incorrect contexts...

VT-d: Failure to quarantine devices in !HVM builds

ISSUE DESCRIPTION Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen. IMPACT When a device is removed from a domain, it is not properly quarantined and retains its access to the domain...

PT-2023-9494 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel version 6.3-intel r1 Description: The vulnerability is related to the iommu/vt-d component of the Linux kernel. It is caused by the allocation of memory with the GFP KERNEL flag during the iommu suspend syscore suspend callback,...

K96003129: Intel CPU vulnerability CVE-2020-24489

Security Advisory Description Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2020-24489 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5...

kernel: iommu/vt-d: Clean up si_domain in the init_dmars() error path

A memory leak flaw was found in the Linux kernel's Intel VT-d IOMMU driver in the initialization error path. A local user can trigger this issue when the initdmars function fails during IOMMU setup, causing the sidomain memory to remain allocated without being freed. This results in a permanent...

SUSE CVE-2020-24489

Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE CVE-2022-26357

race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the...

GSD-2023-1000365 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()

iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.301 by commit...

GSD-2023-1000336 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()

iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.268 by commit...

GSD-2023-1000293 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()

iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.226 by commit...

GSD-2023-1000236 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()

iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000235 iommu/vt-d: Fix PCI device refcount leak in has_external_pci()

iommu/vt-d: Fix PCI device refcount leak in hasexternalpci This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000161 iommu/vt-d: Fix PCI device refcount leak in has_external_pci()

iommu/vt-d: Fix PCI device refcount leak in hasexternalpci This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000159 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()

iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...