In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Lock external INTx masking ops
Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outside of the core interrupt code.
In particular, irq_type is updated holding igate, therefore testing is_intx() requires holding igate. For example clearing DisINTx from config space can otherwise race changes of the interrupt configuration.
This aligns interfaces which may trigger the INTx eventfd into two camps, one side serialized by igate and the other only enabled while INTx is configured. A subsequent patch introduces synchronization for the latter flows.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-rt-modules-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-64k-modules-extraUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64kUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade perf | Aug 12, 2024 | Apr 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.156-102.160Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-tools-devel | Apr 10, 2025 | Apr 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.84-99.169 | Feb 17, 2025 | Apr 5, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python3-perf | Jul 23, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | Apr 5, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 5, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 25, 2024 | Apr 5, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade bpftoolUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-modules | Aug 22, 2024 | Apr 5, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-defaultUpgrade dtb-marvellUpgrade dtb-amdUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdso | Dec 5, 2025 | Feb 13, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-260-genericUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-1175-awsUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.4.0-260-lowlatencyUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-230-genericUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oemUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-virtualUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1137-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1174-awsUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.4.0-1138-kvmUpgrade linux-image-4.15.0-1182-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1060-intel-iotg | Jul 1, 2024 | Apr 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub