CVE-2024-36950 — Resource Injection in Linux
Severity
4.4MEDIUMNVD
OSV7.8OSV6.5OSV5.5
EPSS
0.0%
top 96.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 30
Latest updateSep 18
Description
In the Linux kernel, the following vulnerability has been resolved:
firewire: ohci: mask bus reset interrupts between ISR and bottom half
In the FireWire OHCI interrupt handler, if a bus reset interrupt has
occurred, mask bus reset interrupts until bus_reset_work has serviced and
cleared the interrupt.
Normally, we always leave bus reset interrupts masked. We infer the bus
reset from the self-ID interrupt that happens shortly thereafter. A
scenario where we unmask bus reset interrupts was int…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.8 | Impact: 3.6
Affected Packages5 packages
▶CVEListV5linux/linuxa007bb857e0b26f5d8b73c2ff90782d9c0972620 — b3948c69d60279fce5b2eeda92a07d66296c8130+8
Also affects: Debian Linux 10.0
Patches
🔴Vulnerability Details
19📋Vendor Advisories
19💬Community
1Bugzilla▶
CVE-2024-36950 kernel: firewire: ohci: mask bus reset interrupts between ISR and bottom half↗2024-06-03