Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-57949— irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在its_irq_set_vcpu_affinity函数中启用中断。

AI Predicted 6.5 Difficulty: Hard EPSS 0.19% · P8

Possible ATT&CK Techniques 1 AI

T1053.007 · Container Orchestration Job

Affected Version Matrix 14

VendorProduct Version RangeStatus
Linux Linux 2458f2362f695584bd824c922caa07ffc4fe0d5c< d7b0e89610dd45ac6cf0d6f99bfa9ccc787db344 affected
5c0fb9cb404a2efbbc319ff9d1b877cf4e47e950< 6c84ff2e788fce0099ee3e71a3ed258b1ca1a223 affected
b97e8a2f7130a4b30d1502003095833d16c028b3< 93955a7788121ab5a0f7f27e988b2ed1135a4866 affected
b97e8a2f7130a4b30d1502003095833d16c028b3< 35cb2c6ce7da545f3b5cb1e6473ad7c3a6f08310 affected
c11039edbabdbccf0728844f1002d750d06f9eff affected
6.1.95< 6.1.127 affected
6.6.35< 6.6.74 affected
6.9.6< 6.10 affected
… +6 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-57949

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() The following call-chain leads to enabling interrupts in a nested interrupt disabled section: irq_set_vcpu_affinity() irq_get_desc_lock() raw_spin_lock_irqsave() <--- Disable interrupts its_irq_set_vcpu_affinity() guard(raw_spinlock_irq) <--- Enables interrupts when leaving the guard() irq_put_desc_unlock() <--- Warns because interrupts are enabled This was broken in commit b97e8a2f7130, which replaced the original raw_spin_[un]lock() pair with guard(raw_spinlock_irq). Fix the issue by using guard(raw_spinlock). [ tglx: Massaged change log ]
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在its_irq_set_vcpu_affinity函数中启用中断。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 2458f2362f695584bd824c922caa07ffc4fe0d5c ~ d7b0e89610dd45ac6cf0d6f99bfa9ccc787db344 -
Linux Linux 6.10 -

II. Public POCs for CVE-2024-57949

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-57949

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-57949 (4)

Same Patch Batch · Linux · 2025-02-09 · 3 CVEs total

CVE-2025-21684 gpio: xilinx: Convert gpio_lock to raw spinlock
CVE-2025-21685 platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-57949

No comments yet

Leave a comment