5.5

CVE-2024-46761

pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv

In the Linux kernel, the following vulnerability has been resolved:

pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv

The hotplug driver for powerpc (pci/hotplug/pnv_php.c) causes a kernel
crash when we try to hot-unplug/disable the PCIe switch/bridge from
the PHB.

The crash occurs because although the MSI data structure has been
released during disable/hot-unplug path and it has been assigned
with NULL, still during unregistration the code was again trying to
explicitly disable the MSI which causes the NULL pointer dereference and
kernel crash.

The patch fixes the check during unregistration path to prevent invoking
pci_disable_msi/msix() since its data structure is already freed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 4.19.322
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.284
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.226
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.167
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.110
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.51
Linux ≫ Linux Kernel Version >= 6.7 < 6.10.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.161
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/335e35b748527f0c06ded9eebb65387f60647fda
Patch
https://git.kernel.org/stable/c/438d522227374042b5c8798f8ce83bbe479dca4d
Patch
https://git.kernel.org/stable/c/4eb4085c1346d19d4a05c55246eb93e74e671048
Patch
https://git.kernel.org/stable/c/b82d4d5c736f4fd2ed224c35f554f50d1953d21e
Patch
https://git.kernel.org/stable/c/bc1faed19db95abf0933b104910a3fb01b138f59
Patch
https://git.kernel.org/stable/c/bfc44075b19740d372f989f21dd03168bfda0689
Patch
https://git.kernel.org/stable/c/c0d8094dc740cfacf3775bbc6a1c4720459e8de4
Patch
https://git.kernel.org/stable/c/c4c681999d385e28f84808bbf3a85ea8e982da55
Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html