PT-2024-7738
CVE-2024-26810
·
تاريخ النشر
2024-02-19
·
تاريخ التحديث
2025-09-29
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a synchronization problem in the Linux kernel's vfio component, which can cause a race condition between interrupt configuration changes via ioctl and mask operations through config space changes to DisINTx. This can lead to an interruption configuration change when DisINTx is cleared from config space. The problem is resolved by creating wrappers that add locking for paths outside of the core interrupt code, ensuring that irq type is updated while holding igate, and testing is intx() requires holding igate.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾