Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-rhqv-2x19-a7dq
Vulnerability ID VCID-rhqv-2x19-a7dq
Aliases CVE-2024-35843
Summary In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The existing I/O page fault handler currently locates the PCI device by calling pci_get_domain_bus_and_slot(). This function searches the list of all PCI devices until the desired device is found. To improve lookup efficiency, replace it with device_rbtree_find() to search the device within the probed device rbtree. The I/O page fault is initiated by the device, which does not have any synchronization mechanism with the software to ensure that the device stays in the probed device tree. Theoretically, a device could be released by the IOMMU subsystem after device_rbtree_find() and before iopf_get_dev_fault_param(), which would cause a use-after-free problem. Add a mutex to synchronize the I/O page fault reporting path and the IOMMU release device path. This lock doesn't introduce any performance overhead, as the conflict between I/O page fault reporting and device releasing is very rare.
Status Published
Exploitability 0.5
Weighted Severity 5.4
Risk 2.7
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3 5.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-35843.json
epss 0.00016 https://api.first.org/data/v1/epss?cve=CVE-2024-35843
epss 0.00016 https://api.first.org/data/v1/epss?cve=CVE-2024-35843
epss 0.00016 https://api.first.org/data/v1/epss?cve=CVE-2024-35843
cvssv3.1 7 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 6.8 https://git.kernel.org/stable/c/3d39238991e745c5df85785604f037f35d9d1b15
ssvc Track https://git.kernel.org/stable/c/3d39238991e745c5df85785604f037f35d9d1b15
cvssv3.1 6.8 https://git.kernel.org/stable/c/def054b01a867822254e1dda13d587f5c7a99e2a
ssvc Track https://git.kernel.org/stable/c/def054b01a867822254e1dda13d587f5c7a99e2a
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-35843.json
https://api.first.org/data/v1/epss?cve=CVE-2024-35843
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2281276 https://bugzilla.redhat.com/show_bug.cgi?id=2281276
3d39238991e745c5df85785604f037f35d9d1b15 https://git.kernel.org/stable/c/3d39238991e745c5df85785604f037f35d9d1b15
def054b01a867822254e1dda13d587f5c7a99e2a https://git.kernel.org/stable/c/def054b01a867822254e1dda13d587f5c7a99e2a
RHSA-2024:9315 https://access.redhat.com/errata/RHSA-2024:9315
USN-6816-1 https://usn.ubuntu.com/6816-1/
USN-6817-1 https://usn.ubuntu.com/6817-1/
USN-6817-2 https://usn.ubuntu.com/6817-2/
USN-6817-3 https://usn.ubuntu.com/6817-3/
USN-6878-1 https://usn.ubuntu.com/6878-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-35843.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Found at https://git.kernel.org/stable/c/3d39238991e745c5df85785604f037f35d9d1b15
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-04T19:36:46Z/ Found at https://git.kernel.org/stable/c/3d39238991e745c5df85785604f037f35d9d1b15
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Found at https://git.kernel.org/stable/c/def054b01a867822254e1dda13d587f5c7a99e2a
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-04T19:36:46Z/ Found at https://git.kernel.org/stable/c/def054b01a867822254e1dda13d587f5c7a99e2a
Exploit Prediction Scoring System (EPSS)
Percentile 0.03794
EPSS Score 0.00016
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:50:26.377041+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0