In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Disable auto-enable of exclusive INTx IRQ
Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in request_irq() and subsequently disabled as necessary to align with the masked status flag. This presents a window where the interrupt could fire between these events, resulting in the IRQ incrementing the disable depth twice. This would be unrecoverable for a user since the masked flag prevents nested enables through vfio.
Instead, invert the logic using IRQF_NO_AUTOEN such that exclusive INTx is never auto-enabled, then unmask as required.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.215-203.850Upgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade bpftool-debuginfoUpgrade bpftool | Apr 10, 2025 | Apr 5, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.84-99.169Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpfUpgrade kernel-headersUpgrade bpftool-debuginfo | Feb 17, 2025 | Apr 5, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 16, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftool | Jun 26, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade python3-perf | Jul 23, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Apr 5, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Apr 5, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade dtb-armUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdso | Aug 14, 2024 | Apr 5, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-oemUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-virtual-lts-vividUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-intelUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-lts-vividUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-wilyUpgrade linux-image-raspi2Upgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-lts-utopicUpgrade linux-image-generic-lts-utopicUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpae | Jul 1, 2024 | Apr 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub