CVE-2024-26598

CVSS v3.1 7.8 (High)
78% Progress
EPSS 0.04 % (5th)
0.04% Progress
Affected Products 2
Advisories 21
NVD Status Analyzed

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache

There is a potential UAF scenario in the case of an LPI translation
cache hit racing with an operation that invalidates the cache, such
as a DISCARD ITS command. The root of the problem is that
vgic_its_check_cache() does not elevate the refcount on the vgic_irq
before dropping the lock that serializes refcount changes.

Have vgic_its_check_cache() raise the refcount on the returned vgic_irq
and add the corresponding decrement after queueing the interrupt.

Weaknesses
CWE-416
Use After Free
CVE Status
PUBLISHED
NVD Status
Analyzed
CNA
kernel.org
Published Date
2024-02-23 15:15:09
(6 months ago)
Updated Date
2024-08-27 14:34:41
(2 weeks ago)

Affected Products

Loading...
Loading...

Configuration #1

    CPE23 From Up To
  Linux Kernel from 5.4 version and prior 5.4.269 version cpe:2.3:o:linux:linux_kernel >= 5.4 < 5.4.269
  Linux Kernel from 5.5 version and prior 5.10.209 version cpe:2.3:o:linux:linux_kernel >= 5.5 < 5.10.209
  Linux Kernel from 5.11 version and prior 5.15.148 version cpe:2.3:o:linux:linux_kernel >= 5.11 < 5.15.148
  Linux Kernel from 5.16 version and prior 6.1.75 version cpe:2.3:o:linux:linux_kernel >= 5.16 < 6.1.75
  Linux Kernel from 6.2 version and prior 6.6.14 version cpe:2.3:o:linux:linux_kernel >= 6.2 < 6.6.14
  Linux Kernel from 6.7 version and prior 6.7.2 version cpe:2.3:o:linux:linux_kernel >= 6.7 < 6.7.2

Configuration #2

    CPE23 From Up To
  Debian Linux 10.0 cpe:2.3:o:debian:debian_linux:10.0
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...