CVE-2024-26738: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26738 affects the Linux kernel's powerpc/pseries/iommu component, specifically related to Dynamic Logical Partitioning (DLPAR) functionality. The vulnerability was discovered when a PCI device is dynamically added, causing the kernel to crash with a NULL pointer dereference. This issue affects Linux kernel versions from 6.4 up to (excluding) 6.6.19, and versions from 6.7 up to (excluding) 6.7.7, as well as several 6.8 release candidates (NVD).

The vulnerability stems from incomplete initialization of the pci_controller structure during DLPAR add operations. The issue was introduced by commit a940904443e4 which added iommu_device structure to pci_controller. During system boot, PCI devices are discovered and the iommu_device structure is properly initialized via iommu_device_register(). However, during DLPAR add of a PCI device, while a new pci_controller structure is allocated, the code fails to make the necessary calls to iommu_device_register() interface. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (MEDIUM) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability results in a kernel crash through a NULL pointer dereference, causing a denial of service condition. The crash occurs during the dynamic addition of PCI devices, affecting system stability and availability. The impact is primarily focused on system availability, with no direct impact on confidentiality or integrity (NVD).

The vulnerability requires local access and low privileges to exploit. It is triggered during the dynamic addition of PCI devices through DLPAR operations. The attack complexity is considered low, as it can be reliably triggered through normal system operations involving PCI device addition (NVD).

The vulnerability has been fixed by adding proper initialization calls to register the iommu device during DLPAR add operations. The fix involves registering the iommu device during DLPAR add and unregistering it during removal. System administrators should update to Linux kernel versions 6.6.19, 6.7.7, or later to address this vulnerability (Kernel Patch).