CVE-2024-41096

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a use-after-free vulnerability in the msi capability init function. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability occurs due to a failure in the msi domain alloc locked function, which leads to the descriptor being freed and then accessed in the error exit path of pci msi setup msi irqs in msi capability init. The solution involves copying the descriptor and using the copy for the error exit path unmask operation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.