PT-2024-29750
CVE-2024-42110
·
تاريخ النشر
2024-07-01
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.43
Description
The issue arises from the idxd driver interrupt completion handler using threaded interrupt, which is not compatible with the hard or soft interrupt context required by netif rx(). To resolve this, the call to netif rx() needs to be modified to allow completion via normal context for dmaengine drivers that utilize threaded irq handling. The code should use netif rx ni() or netif rx any context() instead of netif rx().
Recommendations
To resolve the issue, update the Linux kernel to version 6.6.43 or later. If updating is not possible, consider temporarily disabling the idxd driver or restricting its use to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾