CVE-2024-31145

error handling in x86 IOMMU identity mapping

High · published September 25, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

Certain PCI devices in a system might be assigned Reserved Memory

Regions (specified via Reserved Memory Region Reporting, "RMRR") for

Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used

for platform tasks such as legacy USB emulation.

Since the precise purpose of these regions is unknown, once a device

associated with such a region is active, the mappings of these regions

need to remain continuouly accessible by the device. In the logic

establishing these mappings, error handling was flawed, resulting in

such mappings to potentially remain in place when they should have been

removed again. Respective guests would then gain access to memory

regions which they aren't supposed to have access to.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Published
2024-09-25T10:31Z
EPSS history
Timeline
  • 25 SEP 10:31Z
    error handling in x86 IOMMU identity mapping
    cvelistv5