CVE-2024-42150

MEDIUM EPSS 8.0%
Published Jul 30, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jul 30, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: remove separate irq request for MSI and INTx When using MSI or INTx interrupts, request_irq() for pdev->irq will conflict with request_threaded_irq() for txgbe->misc.irq, to cause system crash. So remove txgbe_request_irq() for MSI/INTx case, and rename txgbe_request_msix_irqs() since it only request for queue irqs. Add wx->misc_irq_domain to determine whether the driver creates an IRQ domain and threaded request the IRQs.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
8.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 8

VendorProductVersionRange
linuxlinux_kernel*≥6.8.12  –  <6.9
linuxlinux_kernel*≥6.9  –  <6.9.9
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any

References 2

  • git.kernel.org https://git.kernel.org/stable/c/850103ebe6b062ee0ab0f6670205f861acc76ace
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bd07a98178462e7a02ed2bf7dec90a00944c1da5
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/850103ebe6b062ee0ab0f6670205f861acc76ace
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bd07a98178462e7a02ed2bf7dec90a00944c1da5
    Patch