ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the driver probe because of invalid firmware properties, the GTDT driver unmaps the interrupt that it mapped earlier. However, it never checks whether the mapping of the interrupt actially succeeded. Even more, should the firmware report an illegal interrupt number that overlaps with the GIC SGI range, this can result in an IPI being unmapped, and subsequent fireworks (as reported by Dann Frazier). Rework the driver to have a slightly saner behaviour and actually check whether the interrupt has been mapped before unmapping things.
References
- https://git.kernel.org/stable/c/c3385a9122f8db15b453e07bfc88117fce7f3724
- https://git.kernel.org/stable/c/7b2162db1498c71962a4bb2f776fa4e76d4d305b
- https://git.kernel.org/stable/c/504632a3577a049dd9bb7aabae5b4476f9c586b4
- https://git.kernel.org/stable/c/e0f2d86481eaa83df33b0793f75212919db7a19d
- https://git.kernel.org/stable/c/42e69521ee1fa5abf21f478d147d06bbfe6bf6a8
- https://git.kernel.org/stable/c/596e079c362ac17ed02aa1b99fdc444d62072a01
- https://git.kernel.org/stable/c/1ecd5b129252249b9bc03d7645a7bda512747277
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.7 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2021-33601
- GCVE · GCVE-0-2021-46953
CERT-FR advisories
- CERTFR-2024-AVI-0265 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0242 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.12.0 < 4.14.233cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15.0 < 4.19.191cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20.0 < 5.4.118cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5.0 < 5.10.36cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11.0 < 5.11.20cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.12.0 < 5.12.3
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ca9ae5ec4ef0ed13833b03297ab319676965492c < c3385a9122f8db15b453e07bfc88117fce7f3724 ; affected ca9ae5ec4ef0ed13833b03297ab319676965492c < 7b2162db1498c71962a4bb2f776fa4e76d4d305b ; affected ca9ae5ec4ef0ed13833b03297ab319676965492c < 504632a3577a049dd9bb7aabae5b4476f9c586b4 ; affected ca9ae5ec4ef0ed13833b03297ab319676965492c < e0f2d86481eaa83df33b0793f75212919db7a19d ; affected ca9ae5ec4ef0ed13833b03297ab319676965492c < 42e69521ee1fa5abf21f478d147d06bbfe6bf6a8 ; affected ca9ae5ec4ef0ed13833b03297ab319676965492c < 596e079c362ac17ed02aa1b99fdc444d62072a01 |
| Linux · Linux | affected 4.12 ; unaffected 0 < 4.12 ; unaffected 4.14.233 ≤ 4.14.* ; unaffected 4.19.191 ≤ 4.19.* ; unaffected 5.4.118 ≤ 5.4.* ; unaffected 5.10.36 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |