CVE-2024-57949 — Improper Locking in Linux

CWE-667 — Improper Locking25 documents7 sources
Severity
5.5MEDIUMNVD
OSV5.9
EPSS
0.0%
top 99.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
LinuxLinux KernelDebian Linux+3 more
Timeline
PublishedFeb 9
Latest updateJul 17

Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() The following call-chain leads to enabling interrupts in a nested interrupt disabled section: irq_set_vcpu_affinity() irq_get_desc_lock() raw_spin_lock_irqsave() <--- Disable interrupts its_irq_set_vcpu_affinity() guard(raw_spinlock_irq) <--- Enables interrupts when leaving the guard() irq_put_desc_unlock() <--- Warns because interrupts are enabled Th…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages8 packages

▶NVDlinux/linux_kernel6.1.95 — 6.1.127+3
▶Debianlinux/linux_kernel< 6.1.128-1+2
▶Ubuntulinux/linux_kernel< 6.8.0-62.65

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

12
OSV
linux-hwe-6.8 vulnerabilities↗2025-07-17
▶
OSV
linux-gcp, linux-gcp-6.8 vulnerabilities↗2025-06-30
▶
OSV
linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities↗2025-06-26
▶
OSV
linux-raspi-realtime vulnerabilities↗2025-06-25
▶
OSV
linux-azure-nvidia vulnerabilities↗2025-06-25
▶

📋Vendor Advisories

12
Ubuntu
Linux kernel (HWE) vulnerabilities↗2025-07-17
▶
Ubuntu
Linux kernel vulnerabilities↗2025-06-30
▶
Ubuntu
Linux kernel (Azure, N-Series) vulnerabilities↗2025-06-25
▶
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities↗2025-06-25
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2025-06-24
▶
CVE-2024-57949 — Improper Locking in Linux | cvebase