CVE-2024-50101
mediumpriority · track · 22EPSS 0.002 · 16 %ileDEEURUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices Previously, the domain_context_clear() function incorrectly called pci_for_each_dma_alias() to set up context entries for non-PCI devices. This could lead to kernel hangs or other unexpected behavior. Add a check to only call pci_for_each_dma_alias() for PCI devices. For non-PCI devices, domain_context_clear_one() is called directly.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.1–7.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (77)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2024-3339Linux Kernel: Mehrere SchwachstellenDeutsch2024-11-05csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
- WID-SEC-W-2025-2855IBM DataPower Gateway: Mehrere SchwachstellenDeutsch2025-12-15csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM DataPower Gateway ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht spezifizierte Angriffe durchzuführen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (17)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2024-50101cnnvd
- https://git.kernel.org/stable/c/04d6826ba7ba81213422276e96c90c6565169e1ccnnvd
- https://git.kernel.org/stable/c/0bd9a30c22afb5da203386b811ec31429d2caa78cnnvd
- https://git.kernel.org/stable/c/6e02a277f1db24fa039e23783c8921c7b0e5b1b3cnnvd
- https://git.kernel.org/stable/c/cbfa3a83eba05240ce37839ed48280a05e8e8f6ccnnvd
- https://git.kernel.org/stable/c/fe2e0b6cd00abea3efac66de1da22d844364c1b0cnnvd
- https://git.kernel.org/stable/c/04d6826ba7ba81213422276e96c90c6565169e1cenisa_euvd
- https://git.kernel.org/stable/c/0bd9a30c22afb5da203386b811ec31429d2caa78enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan