In the Linux kernel, the following vulnerability has been resolved:
vfio/fsl-mc: Block calling interrupt handler without trigger
The eventfd_ctx trigger pointer of the vfio_fsl_mc_irq object is initially NULL and may become NULL if the user sets the trigger eventfd to -1. The interrupt handler itself is guaranteed that trigger is always valid between request_irq() and free_irq(), but the loopback testing mechanisms to invoke the handler function need to test the trigger. The triggering and setting ioctl paths both make use of igate and are therefore mutually exclusive.
The vfio-fsl-mc driver does not make use of irqfds, nor does it support any sort of masking operations, therefore unlike vfio-pci and vfio-platform, the flow can remain essentially unchanged.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Apr 5, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchip | Jul 23, 2024 | Apr 5, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-ibm-classic | Jul 1, 2024 | Apr 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub