Linux Kernel Interrupt Management Vulnerability in GIC-v3 ITS

CVE-2024-57949

Summary

A vulnerability in the Linux kernel's GIC-v3 ITS arises from improper interrupt management within the irq_set_vcpu_affinity function. Specifically, this issue occurs in a nested interrupt-disabled context, where interrupts can be inadvertently enabled due to the incorrect use of guard functions. The problem was introduced in a recent commit that changed the locking mechanism, leading to potential system instability and unexpected behaviors. It is essential for system administrators to apply the latest patches to mitigate this vulnerability and ensure the integrity and reliability of their systems.

References