7.5

CVE-2026-64430

NTB: epf: Avoid calling pci_irq_vector() from hardirq context

In the Linux kernel, the following vulnerability has been resolved:

NTB: epf: Avoid calling pci_irq_vector() from hardirq context

ntb_epf_vec_isr() calls pci_irq_vector() in hardirq context to derive
the vector number. pci_irq_vector() calls msi_get_virq() that takes a
mutex and can therefore trigger "scheduling while atomic" splats:

  BUG: scheduling while atomic: kworker/u33:0/55/0x00010001
  ...
  Call trace:
   ...
   schedule+0x38/0x110
   schedule_preempt_disabled+0x28/0x50
   __mutex_lock.constprop.0+0x848/0x908
   __mutex_lock_slowpath+0x18/0x30
   mutex_lock+0x4c/0x60
   msi_domain_get_virq+0xe8/0x138
   pci_irq_vector+0x2c/0x60
   ntb_epf_vec_isr+0x28/0x120 [ntb_hw_epf]
   __handle_irq_event_percpu+0x70/0x3a8
   handle_irq_event+0x48/0x100
   handle_edge_irq+0x100/0x1c8
   ...

Cache the Linux IRQ number for vector 0 when vectors are allocated and
use it as a base in the ISR. Running the ISR in a threaded IRQ handler
would also avoid the problem, but that would be unnecessary here.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb
Version < 33bba331a4a5fee8b6026fe72eca13cceeec1b7b
Status affected
Version 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb
Version < aff271b12a1eb8c8b3da19223ae1a6abe1e8168b
Status affected
Version 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb
Version < 1dba8444ac0100133d72374634f6d7451fff1ccc
Status affected
Version 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb
Version < 174a97f21bf9c54fa37ec0f321692e862ea130a3
Status affected
Version 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb
Version < f71e8d9875069fa73e335f63f02ec6e52e3aaa51
Status affected
Version 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb
Version < 6350df503897d57c5634f71b0767d48c3b837583
Status affected
Version 812ce2f8d14ea791edd88c36ebcc9017bf4c88cb
Version < 4dcddc1c794d1c65eda68f1f8dd04a0fecc0870f
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.12
Status affected
Version 0
Version < 5.12
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.393
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/33bba331a4a5fee8b6026fe72eca13cceeec1b7b
https://git.kernel.org/stable/c/aff271b12a1eb8c8b3da19223ae1a6abe1e8168b
https://git.kernel.org/stable/c/1dba8444ac0100133d72374634f6d7451fff1ccc
https://git.kernel.org/stable/c/174a97f21bf9c54fa37ec0f321692e862ea130a3
https://git.kernel.org/stable/c/f71e8d9875069fa73e335f63f02ec6e52e3aaa51
https://git.kernel.org/stable/c/6350df503897d57c5634f71b0767d48c3b837583
https://git.kernel.org/stable/c/4dcddc1c794d1c65eda68f1f8dd04a0fecc0870f