In the Linux kernel, the following vulnerability has been resolved:
vfio/fsl-mc: Block calling interrupt handler without trigger
The eventfd_ctx trigger pointer of the vfio_fsl_mc_irq object is initially NULL and may become NULL if the user sets the trigger eventfd to -1. The interrupt handler itself is guaranteed that trigger is always valid between request_irq() and free_irq(), but the loopback testing mechanisms to invoke the handler function need to test the trigger. The triggering and setting ioctl paths both make use of igate and are therefore mutually exclusive.
The vfio-fsl-mc driver does not make use of irqfds, nor does it support any sort of masking operations, therefore unlike vfio-pci and vfio-platform, the flow can remain essentially unchanged.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 5, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade dtb-cavium | Jul 23, 2024 | Apr 5, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-intelUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-6.8.0-1004-gke | Jul 1, 2024 | Apr 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub