In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Disable auto-enable of exclusive INTx IRQ
Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in request_irq() and subsequently disabled as necessary to align with the masked status flag. This presents a window where the interrupt could fire between these events, resulting in the IRQ incrementing the disable depth twice. This would be unrecoverable for a user since the masked flag prevents nested enables through vfio.
Instead, invert the logic using IRQF_NO_AUTOEN such that exclusive INTx is never auto-enabled, then unmask as required.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfo | Apr 10, 2025 | Apr 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.84-99.169 | Feb 17, 2025 | Apr 5, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jul 16, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Jun 26, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perf | Jul 23, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Apr 5, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Apr 5, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-marvellUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade kernel-default-vdsoUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade dlm-kmp-default | Aug 14, 2024 | Apr 5, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-lts-vividUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-oem-24.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-intelUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-virtual-lts-vividUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1173-awsUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-utopicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-lts-wilyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-lts-utopicUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lts-wilyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-nvidiaUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-generic-lts-vividUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-aws-lts-20.04 | Jul 1, 2024 | Apr 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub