NetSight
medium4.7

CVE-2024-50192

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a sm…

Impact

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has already been unmapped, but the corresponding doorbell interrupt still visible in /proc/irq/. Plug the race by checking the value of vmapp_count, which tracks whether the VPE is mapped ot not, and returning an error in this case. This involves making vmapp_count common to both GICv4.1 and its v4.0 ancestor.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.6 before 5.10.228
from 5.11 before 5.15.169
from 5.16 before 6.1.114
from 6.2 before 6.6.58
from 6.7 before 6.11.5
Version 6.12

References