CVE-2024-26891: linux kernel from 5.0 (inclusive), before 5.10.214 (exclusive), from 5.11 (inclusive), before 5.15.153 (exclusive)…

Affected technology

linux kernel · from 5.0 (inclusive), before 5.10.214 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.153 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.83 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.23 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.11 (exclusive)
linux

linux kernel · from 6.8 (inclusive), before 6.8.2 (exclusive)
linux

Linux · 6f7db75e1c469057fe7588ed959328ead771ccc7 to before f873b85ec762c5a6abe94a7ddb31df5d3ba07d85, 6f7db75e1c469057fe7588ed959328ead771ccc7 to before d70f1c85113cd8c2aa8373f491ca5d1b22ec0554, 6f7db75e1c469057fe7588ed959328ead771ccc7 to before 34a7b30f56d30114bf4d436e4dc793afe326fbcf, 6f7db75e1c469057fe7588ed959328ead771ccc7 to before 2b74b2a92e524d7c8dec8e02e95ecf18b667c062, 6f7db75e1c469057fe7588ed959328ead771ccc7 to before c04f2780919f20e2cc4846764221f5e802555868, 6f7db75e1c469057fe7588ed959328ead771ccc7 to before 025bc6b41e020aeb1e71f84ae3ffce945026de05, 6f7db75e1c469057fe7588ed959328ead771ccc7 to before 4fc82cd907ac075648789cc3a00877778aa1838b
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/iommu/intel/pasid.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source says in the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected For those endpoint devices connect to system via hotplug capable ports, users could request a hot reset to the device by flapping device's link through setting the slot's link control register, as pciehp_ist() DLLSC interrupt sequence response, pciehp will unload the device driver and then power it off. thus cause an IOMMU device-TLB invalidation (Intel VT-d spec, or ATS Invalidation in PCIe spec r6.1) request for non-existence target device to be sent and deadly loop to retry that request after ITE fault triggered in interrupt context. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.