DEBIAN-CVE-2024-27066
- Source
- https://security-tracker.debian.org/tracker/DEBIAN-CVE-2024-27066
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-27066.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2024-27066
- Upstream
- Published
- 2024-05-01T13:15:50Z
- Modified
- 2025-09-18T05:19:11Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved: virtio: packed: fix unmap leak for indirect desc table When usedmaapi and premapped are true, then the dounmap is false. Because the dounmap is false, vringunmapextrapacked is not called by detachbufpacked. if (unlikely(vq->dounmap)) { curr = id; for (i = 0; i < state->num; i++) { vringunmapextrapacked(vq, &vq->packed.descextra[curr]); curr = vq->packed.descextra[curr].next; } } So the indirect desc table is not unmapped. This causes the unmap leak. So here, we check vq->usedmaapi instead. Synchronously, dma info is updated based on usedma_api judgment This bug does not occur, because no driver use the premapped with indirect.
- References
Affected packages
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:14 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source