CVE-2024-27030

low-risk
Published 2024-05-01

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF to AF vector same interrupt handler is registered which is causing race condition. When two interrupts are raised to two CPUs at same time then two cores serve same event corrupting the data.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.3/10 Medium
LOCAL / HIGH complexity

Affected Products (2)

Affected Vendors

Debian Linux

References (17)

Patch https://git.kernel.org/stable/c/29d2550d79a8cbd31e0fbaa5c0e2a2efdc444e44
Patch https://git.kernel.org/stable/c/4fedae8f9eafa2ac8cdaca58e315f52a7e2a8701
Patch https://git.kernel.org/stable/c/50e60de381c342008c0956fd762e1c26408f372c
Patch https://git.kernel.org/stable/c/766c2627acb2d9d1722cce2e24837044d52d888a
Patch https://git.kernel.org/stable/c/772f18ded0e240cc1fa2b7020cc640e3e5c32b70
Patch https://git.kernel.org/stable/c/94cb17e5cf3a3c484063abc0ce4b8a2b2e8c1cb2
Patch https://git.kernel.org/stable/c/ad6759e233db6fcc131055f8e23b4eafbe81053c
Patch https://git.kernel.org/stable/c/dc29dd00705a62c77de75b6d752259b869aac49d
Patch https://git.kernel.org/stable/c/29d2550d79a8cbd31e0fbaa5c0e2a2efdc444e44
Patch https://git.kernel.org/stable/c/4fedae8f9eafa2ac8cdaca58e315f52a7e2a8701
Patch https://git.kernel.org/stable/c/50e60de381c342008c0956fd762e1c26408f372c
Patch https://git.kernel.org/stable/c/766c2627acb2d9d1722cce2e24837044d52d888a
Patch https://git.kernel.org/stable/c/772f18ded0e240cc1fa2b7020cc640e3e5c32b70
Patch https://git.kernel.org/stable/c/94cb17e5cf3a3c484063abc0ce4b8a2b2e8c1cb2
Patch https://git.kernel.org/stable/c/ad6759e233db6fcc131055f8e23b4eafbe81053c
Patch https://git.kernel.org/stable/c/dc29dd00705a62c77de75b6d752259b869aac49d
Mailing List https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
23
/ 100
low-risk
Severity 16/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 7/34 · Low