CVE-2024-47748: vhost_vdpa: assign irq bypass producer token correctly
In the Linux kernel, the following vulnerability has been resolved:
vhostvdpa: assign irq bypass producer token correctly
We used to call irqbypassunregisterproducer() in vhostvdpasetupvqirq() which is problematic as we don't know if the token pointer is still valid or not.
Actually, we use the eventfdctx as the token so the life cycle of the token should be bound to the VHOSTSETVRINGCALL instead of vhostvdpasetupvqirq() which could be called by setstatus().
Fixing this by setting up irq bypass producer's token when handling VHOSTSETVRINGCALL and un-registering the producer before calling vhostvringioctl() to prevent a possible use after free as eventfd could have been released in vhostvringioctl(). And such registering and unregistering will only be done if DRIVEROK is set.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47748?
CVE-2024-47748 has a severity rating that underscores its importance for system security in the Linux kernel.
How do I fix CVE-2024-47748?
To fix CVE-2024-47748, upgrade your Linux kernel to one of the remedied versions such as 6.1.123-1 or 6.1.119-1.
Which Linux kernel versions are affected by CVE-2024-47748?
CVE-2024-47748 affects various versions of the Linux kernel prior to the patched releases mentioned.
What components are impacted by CVE-2024-47748?
CVE-2024-47748 primarily impacts the vhost_vdpa component within the Linux kernel.
Is CVE-2024-47748 specific to any distribution of Linux?
Yes, CVE-2024-47748 has been noted in the Debian version of the Linux kernel and may also affect other distributions that utilize affected kernel versions.