Vulnetix
Try Vulnetix Request Demo
CVE-2021-28702 PUBLISHED

PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR"). These are typically used for platform tasks such as legacy USB emulation. If such a device is passed through to a guest, then on guest shutdown the device is not properly deassigned. The IOMMU configuration for these devices which are not properly deassigned ends up pointing to a freed data structure, including the IO Pagetables. Subsequent DMA or interrupts from the device will have unpredictable behaviour, ranging from IOMMU faults to memory corruption.

EPSS 0.07% · 22.3th percentile

Risk Scores

EPSS Score
0.07%
22.3th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSxen4.17.3+10-g091466ba55-1.1ubuntu2, 4.17.3+10-g091466ba55-1.1ubuntu3, 4.17.2-1
Ubuntu:18.04:LTSxen0, 4.9.0-0ubuntu3, 4.9.0-0ubuntu4
Ubuntu:16.04:LTSxen4.6.5-0ubuntu1.2, 4.6.5-0ubuntu1.4, 0
Ubuntu:25.10xen4.20.0+68-g35cb38b222-1, 4.20.0-1ubuntu1, 0
Ubuntu:20.04:LTSxen4.9.2-0ubuntu7, 4.11.3+24-g14b62ab3e5-1ubuntu1, 4.11.3+24-g14b62ab3e5-1ubuntu2
Ubuntu:22.04:LTSxen4.16.0-1~ubuntu2.1, 4.16.0-1~ubuntu2, 4.11.4+24-gddaaccbbab-1ubuntu2

Timeline

References

Open in Interactive Console →