CVE-2024-26814

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26814
In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Block calling interrupt handler without trigger The eventfd_ctx trigger pointer of the vfio_fsl_mc_irq object is initially NULL and may become NULL if the user sets the trigger eventfd to -1. The interrupt handler itself is guaranteed that trigger is always valid between request_irq() and free_irq(), but the loopback testing mechanisms to invoke the handler function need to test the trigger. The triggering and setting ioctl paths both make use of igate and are therefore mutually exclusive. The vfio-fsl-mc driver does not make use of irqfds, nor does it support any sort of masking operations, therefore unlike vfio-pci and vfio-platform, the flow can remain essentially unchanged.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/083e750c9f5f4c3bf61161330fb84d7c8e8bb417 Patch
https://git.kernel.org/stable/c/250219c6a556f8c69c5910fca05a59037e24147d Patch
https://git.kernel.org/stable/c/6ec0d88166dac43f29e96801c0927d514f17add9 Patch
https://git.kernel.org/stable/c/7447d911af699a15f8d050dfcb7c680a86f87012 Patch
https://git.kernel.org/stable/c/a563fc18583ca4f42e2fdd0c70c7c618288e7ede Patch
https://git.kernel.org/stable/c/de87511fb0404d23b6da5f4660383b6ed095e28d Patch
https://git.kernel.org/stable/c/ee0bd4ad780dfbb60355b99f25063357ab488267 Patch
https://git.kernel.org/stable/c/083e750c9f5f4c3bf61161330fb84d7c8e8bb417 Patch
https://git.kernel.org/stable/c/250219c6a556f8c69c5910fca05a59037e24147d Patch
https://git.kernel.org/stable/c/6ec0d88166dac43f29e96801c0927d514f17add9 Patch
https://git.kernel.org/stable/c/7447d911af699a15f8d050dfcb7c680a86f87012 Patch
https://git.kernel.org/stable/c/a563fc18583ca4f42e2fdd0c70c7c618288e7ede Patch
https://git.kernel.org/stable/c/de87511fb0404d23b6da5f4660383b6ed095e28d Patch
https://git.kernel.org/stable/c/ee0bd4ad780dfbb60355b99f25063357ab488267 Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

27 Mar 2025, 21:36

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
First Time Linux
Linux linux Kernel
Debian debian Linux
Debian
References () https://git.kernel.org/stable/c/083e750c9f5f4c3bf61161330fb84d7c8e8bb417 - () https://git.kernel.org/stable/c/083e750c9f5f4c3bf61161330fb84d7c8e8bb417 - Patch
References () https://git.kernel.org/stable/c/250219c6a556f8c69c5910fca05a59037e24147d - () https://git.kernel.org/stable/c/250219c6a556f8c69c5910fca05a59037e24147d - Patch
References () https://git.kernel.org/stable/c/6ec0d88166dac43f29e96801c0927d514f17add9 - () https://git.kernel.org/stable/c/6ec0d88166dac43f29e96801c0927d514f17add9 - Patch
References () https://git.kernel.org/stable/c/7447d911af699a15f8d050dfcb7c680a86f87012 - () https://git.kernel.org/stable/c/7447d911af699a15f8d050dfcb7c680a86f87012 - Patch
References () https://git.kernel.org/stable/c/a563fc18583ca4f42e2fdd0c70c7c618288e7ede - () https://git.kernel.org/stable/c/a563fc18583ca4f42e2fdd0c70c7c618288e7ede - Patch
References () https://git.kernel.org/stable/c/de87511fb0404d23b6da5f4660383b6ed095e28d - () https://git.kernel.org/stable/c/de87511fb0404d23b6da5f4660383b6ed095e28d - Patch
References () https://git.kernel.org/stable/c/ee0bd4ad780dfbb60355b99f25063357ab488267 - () https://git.kernel.org/stable/c/ee0bd4ad780dfbb60355b99f25063357ab488267 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Mailing List
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

21 Nov 2024, 09:03

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
References () https://git.kernel.org/stable/c/083e750c9f5f4c3bf61161330fb84d7c8e8bb417 - () https://git.kernel.org/stable/c/083e750c9f5f4c3bf61161330fb84d7c8e8bb417 -
References () https://git.kernel.org/stable/c/250219c6a556f8c69c5910fca05a59037e24147d - () https://git.kernel.org/stable/c/250219c6a556f8c69c5910fca05a59037e24147d -
References () https://git.kernel.org/stable/c/6ec0d88166dac43f29e96801c0927d514f17add9 - () https://git.kernel.org/stable/c/6ec0d88166dac43f29e96801c0927d514f17add9 -
References () https://git.kernel.org/stable/c/7447d911af699a15f8d050dfcb7c680a86f87012 - () https://git.kernel.org/stable/c/7447d911af699a15f8d050dfcb7c680a86f87012 -
References () https://git.kernel.org/stable/c/a563fc18583ca4f42e2fdd0c70c7c618288e7ede - () https://git.kernel.org/stable/c/a563fc18583ca4f42e2fdd0c70c7c618288e7ede -
References () https://git.kernel.org/stable/c/de87511fb0404d23b6da5f4660383b6ed095e28d - () https://git.kernel.org/stable/c/de87511fb0404d23b6da5f4660383b6ed095e28d -
References () https://git.kernel.org/stable/c/ee0bd4ad780dfbb60355b99f25063357ab488267 - () https://git.kernel.org/stable/c/ee0bd4ad780dfbb60355b99f25063357ab488267 -

05 Nov 2024, 10:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

25 Jun 2024, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

13 Apr 2024, 12:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/a563fc18583ca4f42e2fdd0c70c7c618288e7ede -

10 Apr 2024, 15:16

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: vfio/fsl-mc: Bloquear el controlador de interrupciones de llamada sin disparador. El puntero de disparo eventfd_ctx del objeto vfio_fsl_mc_irq es inicialmente NULL y puede convertirse en NULL si el usuario establece el disparador eventfd en -1. El propio controlador de interrupciones garantiza que el disparador siempre será válido entre request_irq() y free_irq(), pero los mecanismos de prueba de bucle invertido para invocar la función del controlador deben probar el disparador. Las rutas de activación y configuración de ioctl utilizan igate y, por lo tanto, son mutuamente excluyentes. El controlador vfio-fsl-mc no utiliza irqfds ni admite ningún tipo de operación de enmascaramiento; por lo tanto, a diferencia de vfio-pci y vfio-platform, el flujo puede permanecer esencialmente sin cambios.
References
  • () https://git.kernel.org/stable/c/250219c6a556f8c69c5910fca05a59037e24147d -

05 Apr 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-05 09:15

Updated : 2025-03-27 21:36

NVD link : CVE-2024-26814

Mitre link : CVE-2024-26814

CVE.ORG link : CVE-2024-26814

JSON object : View

Products Affected

linux

  • linux_kernel

debian

  • debian_linux
CWE
CWE-476

NULL Pointer Dereference