CVE-2021-46909: ARM: footbridge: fix PCI interrupt mapping
First published: Tue Feb 27 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix PCI interrupt mapping Since commit 30fdfb929e82 ("PCI: Add a call to pci_assign_irq() in pci_device_probe()"), the PCI code will call the IRQ mapping function whenever a PCI driver is probed. If these are marked as __init, this causes an oops if a PCI driver is loaded or bound after the kernel has initialised.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel | >=4.13.0<4.14.232 | |
| Linux kernel | >=4.15.0<4.19.189 | |
| Linux kernel | >=4.20.0<5.4.114 | |
| Linux kernel | >=5.5.0<5.10.32 | |
| Linux kernel | >=5.11.0<5.11.16 | |
| IBM Security Verify Governance - Identity Manager | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager Software Stack | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager Virtual Appliance | <=ISVG 10.0.2 | |
| IBM Security Verify Governance Identity Manager Container | <=ISVG 10.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/1fc087fdb98d556b416c82ed6e3964a30885f47a
- https://git.kernel.org/stable/c/2643da6aa57920d9159a1a579fb04f89a2b0d29a
- https://git.kernel.org/stable/c/30e3b4f256b4e366a61658c294f6a21b8626dda7
- https://git.kernel.org/stable/c/532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf
- https://git.kernel.org/stable/c/871b569a3e67f570df9f5ba195444dc7c621293b
- https://git.kernel.org/stable/c/c3efce8cc9807339633ee30e39882f4c8626ee1d
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2266412
- https://access.redhat.com/errata/RHSA-2024:4211
- https://access.redhat.com/errata/RHSA-2024:4352
- https://bugzilla.redhat.com/show_bug.cgi?id=2266408
- https://www.ibm.com/support/pages/node/7230443 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2021-46909?
CVE-2021-46909 has been classified with medium severity due to the potential impacts on system performance and stability.
How do I fix CVE-2021-46909?
To resolve CVE-2021-46909, upgrade your Linux kernel to a version above the specified vulnerable ranges.
What versions of Linux kernel are affected by CVE-2021-46909?
CVE-2021-46909 affects Linux kernel versions between 4.13.0 and 4.14.232, 4.15.0 and 4.19.189, 4.20.0 and 5.4.114, 5.5.0 and 5.10.32, and 5.11.0 and 5.11.16.
What is the nature of the vulnerability in CVE-2021-46909?
CVE-2021-46909 addresses a problem with PCI interrupt mapping within the Linux kernel affecting the ARM architecture.
Is CVE-2021-46909 exploitable by attackers?
While CVE-2021-46909 primarily impacts system performance, it may expose systems to denial-of-service risks under certain conditions.
- agent/title
- agent/type
- agent/first-publish-date
- agent/author
- agent/remedy
- agent/weakness
- agent/severity
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-46909
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- vendor/linux
- canonical/linux kernel
- version/linux kernel/4.13.0
- version/linux kernel/4.15.0
- version/linux kernel/4.20.0
- version/linux kernel/5.5.0
- version/linux kernel/5.11.0
- vendor/ibm
- canonical/ibm security verify governance - identity manager
- version/ibm security verify governance - identity manager/isvg 10.0.2
- canonical/ibm security verify governance, identity manager software stack
- version/ibm security verify governance, identity manager software stack/isvg 10.0.2
- canonical/ibm security verify governance, identity manager virtual appliance
- version/ibm security verify governance, identity manager virtual appliance/isvg 10.0.2
- canonical/ibm security verify governance identity manager container
- version/ibm security verify governance identity manager container/isvg 10.0.2