In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Disable auto-enable of exclusive INTx IRQ
Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in request_irq() and subsequently disabled as necessary to align with the masked status flag. This presents a window where the interrupt could fire between these events, resulting in the IRQ incrementing the disable depth twice. This would be unrecoverable for a user since the masked flag prevents nested enables through vfio.
Instead, invert the logic using IRQF_NO_AUTOEN such that exclusive INTx is never auto-enabled, then unmask as required.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.156-102.160Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Apr 10, 2025 | Apr 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-headers | Feb 17, 2025 | Apr 5, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jun 26, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-devel | Jul 23, 2024 | Apr 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Apr 5, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | Apr 5, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade dtb-socionextUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade dtb-amd | Aug 14, 2024 | Apr 5, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-virtual-lts-vividUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-229-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-hweUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-generic-lts-utopicUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-lts-wilyUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-gcpUpgrade linux-image-generic-lts-vividUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-generic-lts-wilyUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k | Jul 1, 2024 | Apr 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub