PT-2024-29750
CVE-2024-42110
·
Published
2024-07-01
·
Updated
2026-10-09
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.43
Description
The issue arises from the idxd driver interrupt completion handler using threaded interrupt, which is not compatible with the hard or soft interrupt context required by netif rx(). To resolve this, the call to netif rx() needs to be modified to allow completion via normal context for dmaengine drivers that utilize threaded irq handling. The code should use netif rx ni() or netif rx any context() instead of netif rx().
Recommendations
To resolve the issue, update the Linux kernel to version 6.6.43 or later. If updating is not possible, consider temporarily disabling the idxd driver or restricting its use to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾