NetSight
IP …
high8.8

CVE-2024-26598

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF…

Impact

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the cache, such as a DISCARD ITS command. The root of the problem is that vgic_its_check_cache() does not elevate the refcount on the vgic_irq before dropping the lock that serializes refcount changes. Have vgic_its_check_cache() raise the refcount on the returned vgic_irq and add the corresponding decrement after queueing the interrupt.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.4 before 5.4.269
from 5.5 before 5.10.209
from 5.11 before 5.15.148
from 5.16 before 6.1.75
from 6.2 before 6.6.14
from 6.7 before 6.7.2
DebianDebian Linux
Version 10.0

Weakness classification

CWE-416

References