CVE-2024-31143
published 2024-07-18CVE-2024-31143: An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of…
PriorityP340high7.5CVSS 3.1
AVNACHPRLUINSUCHIHAH
EPSS
0.51%
39.9th percentile
An optional feature of PCI MSI called "Multiple Message" allows a
device to use multiple consecutive interrupt vectors. Unlike for MSI-X,
the setting up of these consecutive vectors needs to happen all in one
go. In this handling an error path could be taken in different
situations, with or without a particular lock held. This error path
wrongly releases the lock even when it is not currently held.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xen | < xen 4.17.5+23-ga4e5191dc0-1 (bookworm) | xen 4.17.5+23-ga4e5191dc0-1 (bookworm) |
| xen | xen | >= 0 < 4.16.6-r1 | 4.16.6-r1 |
| xen | xen | >= 0 < 4.17.5-r0 | 4.17.5-r0 |
| xen | xen | >= 0 < 4.18.3-r0 | 4.18.3-r0 |
| xen | xen | >= 0 < 4.18.3-r0 | 4.18.3-r0 |
| xen | xen | >= 0 < 4.19.0-r0 | 4.19.0-r0 |
| xen | xen | >= 0 < 4.19.0-r0 | 4.19.0-r0 |
| xen | xen | >= 0 < 4.19.0-r0 | 4.19.0-r0 |
| xen | xen | >= 0 < 4.17.5+23-ga4e5191dc0-1 | 4.17.5+23-ga4e5191dc0-1 |
| xen | xen | >= 0 < 4.19.1-1 | 4.19.1-1 |
| xen | xen | >= 0 < 4.19.1-1 | 4.19.1-1 |
| xen | xen | >= 4.4.0 | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.5HIGH
vendor_debian7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2024-31143: xen - An optional feature of PCI MSI called "Multiple Message" allows a device to use ...
vendor_debian·2024·CVSS 7.5
CVE-2024-31143 [HIGH] CVE-2024-31143: xen - An optional feature of PCI MSI called "Multiple Message" allows a device to use ...
An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or without a particular lock held. This error path wrongly releases the lock even when it is not currently held.
Scope: local
bookworm: resolved (fixed in 4.17.5+23-ga4e5191dc0-1)
bullseye: open
forky: resolved (fixed in 4.19.1-1)
sid: resolved (fixed in 4.19.1-1)
trixie: resolved (fixed in 4.19.1-1)
OSV
CVE-2024-31143: An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors
osv·2024-07-18·CVSS 7.5
CVE-2024-31143 [HIGH] CVE-2024-31143: An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors
An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or without a particular lock held. This error path wrongly releases the lock even when it is not currently held.
OSV
CVE-2024-31143: An optional feature of PCI MSI called "Multiple Message" allows a
device to use multiple consecutive interrupt vectors
osv·2024-07-18·CVSS 7.5
CVE-2024-31143 [HIGH] CVE-2024-31143: An optional feature of PCI MSI called "Multiple Message" allows a
device to use multiple consecutive interrupt vectors
An optional feature of PCI MSI called "Multiple Message" allows a
device to use multiple consecutive interrupt vectors. Unlike for MSI-X,
the setting up of these consecutive vectors needs to happen all in one
go. In this handling an error path could be taken in different
situations, with or without a particular lock held. This error path
wrongly releases the lock even when it is not currently held.
GHSA
GHSA-cjq8-723f-8fmv: An optional feature of PCI MSI called "Multiple Message" allows a
device to use multiple consecutive interrupt vectors
ghsa_unreviewed·2024-07-18
CVE-2024-31143 [HIGH] CWE-832 GHSA-cjq8-723f-8fmv: An optional feature of PCI MSI called "Multiple Message" allows a
device to use multiple consecutive interrupt vectors
An optional feature of PCI MSI called "Multiple Message" allows a
device to use multiple consecutive interrupt vectors. Unlike for MSI-X,
the setting up of these consecutive vectors needs to happen all in one
go. In this handling an error path could be taken in different
situations, with or without a particular lock held. This error path
wrongly releases the lock even when it is not currently held.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-18
Published