Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2024-50192

irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has already been unmapped, but the corresponding doorbell interrupt still visible in /proc/irq/. Plug the race by checking the value of vmapp_count, which tracks whether the VPE is mapped ot not, and returning an error in this case. This involves making vmapp_count common to both GICv4.1 and its v4.0 ancestor.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 64edfaa9a2342a3ce34f8cb982c2c2df84db4de3 to < b7d7b7fc876f836f40bf48a87e07ea18756ba196affected
  • 64edfaa9a2342a3ce34f8cb982c2c2df84db4de3 to < 755b9532c885b8761fb135fedcd705e21e61cccbaffected
  • 64edfaa9a2342a3ce34f8cb982c2c2df84db4de3 to < 64b12b061c5488e2d69e67c4eaae5da64fd30bfeaffected
  • 64edfaa9a2342a3ce34f8cb982c2c2df84db4de3 to < 01282ab5182f85e42234df2ff42f0ce790f465ffaffected
  • 64edfaa9a2342a3ce34f8cb982c2c2df84db4de3 to < d960505a869e66184fff97fb334980a5b797c7c6affected
  • 64edfaa9a2342a3ce34f8cb982c2c2df84db4de3 to < 1442ee0011983f0c5c4b92380e6853afb513841aaffected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.228 to ≤ 5.10.*unaffected
  • 5.15.169 to ≤ 5.15.*unaffected
  • 6.1.114 to ≤ 6.1.*unaffected
  • 6.6.58 to ≤ 6.6.*unaffected
  • 6.11.5 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References