CVE-2024-42150

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42150
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: remove separate irq request for MSI and INTx When using MSI or INTx interrupts, request_irq() for pdev->irq will conflict with request_threaded_irq() for txgbe->misc.irq, to cause system crash. So remove txgbe_request_irq() for MSI/INTx case, and rename txgbe_request_msix_irqs() since it only request for queue irqs. Add wx->misc_irq_domain to determine whether the driver creates an IRQ domain and threaded request the IRQs.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/850103ebe6b062ee0ab0f6670205f861acc76ace Patch
https://git.kernel.org/stable/c/bd07a98178462e7a02ed2bf7dec90a00944c1da5 Patch
https://git.kernel.org/stable/c/850103ebe6b062ee0ab0f6670205f861acc76ace Patch
https://git.kernel.org/stable/c/bd07a98178462e7a02ed2bf7dec90a00944c1da5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*
History

09 Dec 2024, 23:07

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/850103ebe6b062ee0ab0f6670205f861acc76ace - () https://git.kernel.org/stable/c/850103ebe6b062ee0ab0f6670205f861acc76ace - Patch
References () https://git.kernel.org/stable/c/bd07a98178462e7a02ed2bf7dec90a00944c1da5 - () https://git.kernel.org/stable/c/bd07a98178462e7a02ed2bf7dec90a00944c1da5 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo

21 Nov 2024, 09:33

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/850103ebe6b062ee0ab0f6670205f861acc76ace - () https://git.kernel.org/stable/c/850103ebe6b062ee0ab0f6670205f861acc76ace -
References () https://git.kernel.org/stable/c/bd07a98178462e7a02ed2bf7dec90a00944c1da5 - () https://git.kernel.org/stable/c/bd07a98178462e7a02ed2bf7dec90a00944c1da5 -

30 Jul 2024, 13:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: txgbe: elimina la solicitud irq separada para MSI e INTx Cuando se usan interrupciones MSI o INTx, request_irq() para pdev->irq entrará en conflicto con request_threaded_irq() para txgbe->misc .irq, para provocar un fallo del sistema. Por lo tanto, elimine txgbe_request_irq() para el caso MSI/INTx y cambie el nombre de txgbe_request_msix_irqs() ya que solo solicita irqs en cola. Agregue wx->misc_irq_domain para determinar si el controlador crea un dominio IRQ y solicita por subprocesos las IRQ.

30 Jul 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-30 08:15

Updated : 2024-12-09 23:07

NVD link : CVE-2024-42150

Mitre link : CVE-2024-42150

CVE.ORG link : CVE-2024-42150

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo