CVE-2024-27437
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in…
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in request_irq() and subsequently disabled as necessary to align with the masked status flag. This presents a window where the interrupt could fire between these events, resulting in the IRQ incrementing the disable depth twice. This would be unrecoverable for a user since the masked flag prevents nested enables through vfio. Instead, invert the logic using IRQF_NO_AUTOEN such that exclusive INTx is never auto-enabled, then unmask as required.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.24% probability · 15th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel · debian/debian linux
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/139dfcc4d723ab13469881200c7d80f49d776060Patch
- https://git.kernel.org/stable/c/26389925d6c2126fb777821a0a983adca7ee6351Patch
- https://git.kernel.org/stable/c/2a4a666c45107206605b7b5bc20545f8aabc4fa2Patch
- https://git.kernel.org/stable/c/3b3491ad0f80d913e7d255941d4470f4a4d9bfdaPatch
- https://git.kernel.org/stable/c/561d5e1998d58b54ce2bbbb3e843b669aa0b3db5Patch
- https://git.kernel.org/stable/c/b7a2f0955ffceffadfe098b40b50307431f45438Patch
- https://git.kernel.org/stable/c/bf0bc84a20e6109ab07d5dc072067bd01eb931ecPatch
- https://git.kernel.org/stable/c/fe9a7082684eb059b925c535682e68c34d487d43Patch
- https://git.kernel.org/stable/c/139dfcc4d723ab13469881200c7d80f49d776060Patch
- https://git.kernel.org/stable/c/26389925d6c2126fb777821a0a983adca7ee6351Patch
- https://git.kernel.org/stable/c/2a4a666c45107206605b7b5bc20545f8aabc4fa2Patch
- https://git.kernel.org/stable/c/3b3491ad0f80d913e7d255941d4470f4a4d9bfdaPatch
- https://git.kernel.org/stable/c/561d5e1998d58b54ce2bbbb3e843b669aa0b3db5Patch
- https://git.kernel.org/stable/c/b7a2f0955ffceffadfe098b40b50307431f45438Patch
- https://git.kernel.org/stable/c/bf0bc84a20e6109ab07d5dc072067bd01eb931ecPatch
- https://git.kernel.org/stable/c/fe9a7082684eb059b925c535682e68c34d487d43Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlMailing List
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.