ARM: footbridge: fix PCI interrupt mapping (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix PCI interrupt mapping Since commit 30fdfb929e82 ("PCI: Add a call to pci_assign_irq() in pci_device_probe()"), the PCI code will call the IRQ mapping function whenever a PCI driver is probed. If these are marked as __init, this causes an oops if a PCI driver is loaded or bound after the kernel has initialised.
Weaknesses (CWE)
- CWE-754 — Improper Check for Unusual or Exceptional Conditions
References
- https://git.kernel.org/stable/c/532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf
- https://git.kernel.org/stable/c/2643da6aa57920d9159a1a579fb04f89a2b0d29a
- https://git.kernel.org/stable/c/871b569a3e67f570df9f5ba195444dc7c621293b
- https://git.kernel.org/stable/c/1fc087fdb98d556b416c82ed6e3964a30885f47a
- https://git.kernel.org/stable/c/c3efce8cc9807339633ee30e39882f4c8626ee1d
- https://git.kernel.org/stable/c/30e3b4f256b4e366a61658c294f6a21b8626dda7
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2021-33557
- GCVE · GCVE-0-2021-46909
CERT-FR advisories
- CERTFR-2026-AVI-1165 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0903 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0741 — Multiples vulnérabilités dans Juniper Secure Analytics · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0720 — Multiples vulnérabilités dans IBM QRadar SIEM · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0577 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0458 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0440 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0420 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0363 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.13.0 < 4.14.232cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15.0 < 4.19.189cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20.0 < 5.4.114cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5.0 < 5.10.32cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11.0 < 5.11.16
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 < 532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf ; affected 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 < 2643da6aa57920d9159a1a579fb04f89a2b0d29a ; affected 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 < 871b569a3e67f570df9f5ba195444dc7c621293b ; affected 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 < 1fc087fdb98d556b416c82ed6e3964a30885f47a ; affected 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 < c3efce8cc9807339633ee30e39882f4c8626ee1d ; affected 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 < 30e3b4f256b4e366a61658c294f6a21b8626dda7 |
| Linux · Linux | affected 4.13 ; unaffected 0 < 4.13 ; unaffected 4.14.232 ≤ 4.14.* ; unaffected 4.19.189 ≤ 4.19.* ; unaffected 5.4.114 ≤ 5.4.* ; unaffected 5.10.32 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |