-

CVE-2023-54326

misc: pci_endpoint_test: Free IRQs before removing the device

In the Linux kernel, the following vulnerability has been resolved:

misc: pci_endpoint_test: Free IRQs before removing the device

In pci_endpoint_test_remove(), freeing the IRQs after removing the device
creates a small race window for IRQs to be received with the test device
memory already released, causing the IRQ handler to access invalid memory,
resulting in an oops.

Free the device IRQs before removing the device to avoid this issue.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Version < fb7f8bdb886f2ebf35ee5edaf2bf5f02b063ddb7
Status affected
Version e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Version < dd2210379205fcd23a9d8869b0cef90e3770577c
Status affected
Version e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Version < cdf9a7e2cdc7a5464e3cc6d0b715ba2b1d215521
Status affected
Version e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Version < 14bdee38e96c7d37ca15e7bea50411eee25fe315
Status affected
Version e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Version < c2dba13bc0c62b79a3cbe4bfe5faa32231bf9b55
Status affected
Version e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Version < 38d12bcf4e2ce3d285eb29644a79a54f42040fab
Status affected
Version e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Version < f61b7634a3249d12b9daa36ffbdb9965b6f24c6c
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 4.19
Status affected
Version 0
Version < 4.19
Status unaffected
Version <= 4.19.*
Version 4.19.291
Status unaffected
Version <= 5.4.*
Version 5.4.251
Status unaffected
Version <= 5.10.*
Version 5.10.188
Status unaffected
Version <= 5.15.*
Version 5.15.121
Status unaffected
Version <= 6.1.*
Version 6.1.40
Status unaffected
Version <= 6.4.*
Version 6.4.5
Status unaffected
Version <= *
Version 6.5
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.144
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.