PT-2024-7738
CVE-2024-26810
·
Published
2024-02-19
·
Updated
2025-09-29
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a synchronization problem in the Linux kernel's vfio component, which can cause a race condition between interrupt configuration changes via ioctl and mask operations through config space changes to DisINTx. This can lead to an interruption configuration change when DisINTx is cleared from config space. The problem is resolved by creating wrappers that add locking for paths outside of the core interrupt code, ensuring that irq type is updated while holding igate, and testing is intx() requires holding igate.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾