CVE-2024-26814: vfio/fsl-mc: Block calling interrupt handler without trigger
In the Linux kernel, the following vulnerability has been resolved:
vfio/fsl-mc: Block calling interrupt handler without trigger
The eventfdctx trigger pointer of the vfiofslmcirq object is initially NULL and may become NULL if the user sets the trigger eventfd to -1. The interrupt handler itself is guaranteed that trigger is always valid between requestirq() and freeirq(), but the loopback testing mechanisms to invoke the handler function need to test the trigger. The triggering and setting ioctl paths both make use of igate and are therefore mutually exclusive.
The vfio-fsl-mc driver does not make use of irqfds, nor does it support any sort of masking operations, therefore unlike vfio-pci and vfio-platform, the flow can remain essentially unchanged.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.176.3-3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26814?
CVE-2024-26814 is classified as a vulnerability affecting the Linux kernel that can lead to unintended behaviors in interrupt handling.
How do I fix CVE-2024-26814?
To fix CVE-2024-26814, upgrade to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What systems are affected by CVE-2024-26814?
CVE-2024-26814 affects specific Debian versions of the Linux kernel.
What components are impacted by CVE-2024-26814?
CVE-2024-26814 specifically impacts the vfio_fsl_mc_irq object within the Linux kernel.
Can CVE-2024-26814 be exploited remotely?
CVE-2024-26814 primarily affects local operations, and exploitation would likely require local access to the system.