cbcvebase.
CVE-2021-46953
published 2024-02-27

CVE-2021-46953: In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the…

PriorityP427medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.24%
15.4th percentile
In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the driver probe because of invalid firmware properties, the GTDT driver unmaps the interrupt that it mapped earlier. However, it never checks whether the mapping of the interrupt actially succeeded. Even more, should the firmware report an illegal interrupt number that overlaps with the GIC SGI range, this can result in an IPI being unmapped, and subsequent fireworks (as reported by Dann Frazier). Rework the driver to have a slightly saner behaviour and actually check whether the interrupt has been mapped before unmapping things.

Affected

19 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.10.38-1 (bookworm)linux 5.10.38-1 (bookworm)
linuxlinux——
linuxlinux>= ca9ae5ec4ef0ed13833b03297ab319676965492c < c3385a9122f8db15b453e07bfc88117fce7f3724c3385a9122f8db15b453e07bfc88117fce7f3724
linuxlinux>= ca9ae5ec4ef0ed13833b03297ab319676965492c < 7b2162db1498c71962a4bb2f776fa4e76d4d305b7b2162db1498c71962a4bb2f776fa4e76d4d305b
linuxlinux>= ca9ae5ec4ef0ed13833b03297ab319676965492c < 504632a3577a049dd9bb7aabae5b4476f9c586b4504632a3577a049dd9bb7aabae5b4476f9c586b4
linuxlinux>= ca9ae5ec4ef0ed13833b03297ab319676965492c < e0f2d86481eaa83df33b0793f75212919db7a19de0f2d86481eaa83df33b0793f75212919db7a19d
linuxlinux>= ca9ae5ec4ef0ed13833b03297ab319676965492c < 42e69521ee1fa5abf21f478d147d06bbfe6bf6a842e69521ee1fa5abf21f478d147d06bbfe6bf6a8
linuxlinux>= ca9ae5ec4ef0ed13833b03297ab319676965492c < 596e079c362ac17ed02aa1b99fdc444d62072a01596e079c362ac17ed02aa1b99fdc444d62072a01
linuxlinux>= ca9ae5ec4ef0ed13833b03297ab319676965492c < 1ecd5b129252249b9bc03d7645a7bda5127472771ecd5b129252249b9bc03d7645a7bda512747277
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 4.12.0 < 4.14.2334.14.233
linuxlinux_kernel>= 4.15.0 < 4.19.1914.19.191
linuxlinux_kernel>= 4.20.0 < 5.4.1185.4.118
linuxlinux_kernel>= 5.11.0 < 5.11.205.11.20
linuxlinux_kernel>= 5.12.0 < 5.12.35.12.3
linuxlinux_kernel>= 5.5.0 < 5.10.365.10.36

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
osv6.7MEDIUM
vendor_debian6.7MEDIUM
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.