CVE-2024-36950Resource Injection in Linux

CWE-99Resource Injection40 documents6 sources
Severity
4.4MEDIUMNVD
OSV7.8OSV6.5OSV5.5
EPSS
0.0%
top 96.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 30
Latest updateSep 18

Description

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: mask bus reset interrupts between ISR and bottom half In the FireWire OHCI interrupt handler, if a bus reset interrupt has occurred, mask bus reset interrupts until bus_reset_work has serviced and cleared the interrupt. Normally, we always leave bus reset interrupts masked. We infer the bus reset from the self-ID interrupt that happens shortly thereafter. A scenario where we unmask bus reset interrupts was int

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.8 | Impact: 3.6

Affected Packages5 packages

NVDlinux/linux_kernel4.205.4.276+7
Debianlinux/linux_kernel< 5.10.218-1+3
Ubuntulinux/linux_kernel< 5.4.0-192.212+2
CVEListV5linux/linuxa007bb857e0b26f5d8b73c2ff90782d9c0972620b3948c69d60279fce5b2eeda92a07d66296c8130+8
debiandebian/linux< linux 6.1.94-1 (bookworm)

Also affects: Debian Linux 10.0

Patches

🔴Vulnerability Details

19
OSV
linux-xilinx-zynqmp vulnerabilities2024-09-18
OSV
linux-raspi-5.4 vulnerabilities2024-08-22
OSV
linux-hwe-5.15 vulnerabilities2024-08-21
OSV
linux-bluefield vulnerabilities2024-08-21
OSV
linux-azure-5.4 vulnerabilities2024-08-19

📋Vendor Advisories

19
Ubuntu
Linux kernel vulnerabilities2024-09-18
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities2024-08-22
Ubuntu
Linux kernel (HWE) vulnerabilities2024-08-21
Ubuntu
Linux kernel (BlueField) vulnerabilities2024-08-21
Ubuntu
Linux kernel (Azure) vulnerabilities2024-08-19

💬Community

1
Bugzilla
CVE-2024-36950 kernel: firewire: ohci: mask bus reset interrupts between ISR and bottom half2024-06-03