Kernel Interrupt Handling Vulnerability in Linux Packages
Summary
CVE-2024-57949: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() The following call-chain leads to enabling interrupts in a nested interrupt d... Affects linux versions < 6.1.128-1. Fixed in 6.1.128-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used in various distributions, including Debian. The kernel's functionality includes process management, memory management, device management, and system calls. This vulnerability specifically affects the interrupt handling mechanism within the kernel, which is crucial for ensuring that hardware interrupts are processed correctly and efficiently.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the irqchip/gic-v3-its component, where interrupts can be erroneously enabled during a nested interrupt-disabled section. This issue arises from a change made in commit b97e8a2f7130, which replaced the original raw_spin_[un]lock() pair with guard(raw_spinlock_irq). As a result, when the function its_irq_set_vcpu_affinity() is called, it can lead to interrupts being enabled unexpectedly, potentially causing system instability and unpredictable behavior. This vulnerability has been assigned CVE-2024-57949.
How To Fix
Minimum fixed version
6.1.128-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. The best course of action is to apply the available patches as soon as possible.
Conclusion
The vulnerability CVE-2024-57949 in the Linux kernel poses a significant risk by allowing interrupts to be enabled inappropriately. Users are urged to update their systems to the patched versions to mitigate this risk. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2024-57949 is a vulnerability in the Linux kernel that allows interrupts to be enabled in a nested interrupt-disabled section, potentially leading to system instability.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring installation.
The risks include potential system instability, unpredictable behavior, and possible security implications due to improper interrupt handling.
You can update your Linux package using the commands provided in the 'how_to_fix' section, ensuring you install the patched version.
Currently, there are no specific workarounds available. It is recommended to apply the patch as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
