CVE-2024-57949

irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()

State: Published
Severity: 5.5 Medium
Published: Feb 9, 2025
Updated: May 23, 2026
Reserved: Jan 19, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()

The following call-chain leads to enabling interrupts in a nested interrupt disabled section:

irq_set_vcpu_affinity() irq_get_desc_lock() raw_spin_lock_irqsave() <--- Disable interrupts its_irq_set_vcpu_affinity() guard(raw_spinlock_irq) <--- Enables interrupts when leaving the guard() irq_put_desc_unlock() <--- Warns because interrupts are enabled

This was broken in commit b97e8a2f7130, which replaced the original raw_spin_[un]lock() pair with guard(raw_spinlock_irq).

Fix the issue by using guard(raw_spinlock).

[ tglx: Massaged change log ]

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-667 Improper Locking

Affected Products

Product	Versions
LinuxLinux	2458f2362f695584bd824c922caa07ffc4fe0d5c to before d7b0e89610dd45ac6cf0d6f99bfa9ccc787db344Affected 5c0fb9cb404a2efbbc319ff9d1b877cf4e47e950 to before 6c84ff2e788fce0099ee3e71a3ed258b1ca1a223Affected b97e8a2f7130a4b30d1502003095833d16c028b3 to before 93955a7788121ab5a0f7f27e988b2ed1135a4866Affected b97e8a2f7130a4b30d1502003095833d16c028b3 to before 35cb2c6ce7da545f3b5cb1e6473ad7c3a6f08310Affected c11039edbabdbccf0728844f1002d750d06f9effAffected 6.1.95 to before 6.1.127Affected 6.6.35 to before 6.6.74Affected 6.9.6 to before 6.10Affected
LinuxLinux	6.10Affected before 6.10Not affected 6.1.127 through 6.1.Not affected 6.6.74 through 6.6.Not affected 6.12.11 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

2458f2362f695584bd824c922caa07ffc4fe0d5c to before d7b0e89610dd45ac6cf0d6f99bfa9ccc787db344Affected
5c0fb9cb404a2efbbc319ff9d1b877cf4e47e950 to before 6c84ff2e788fce0099ee3e71a3ed258b1ca1a223Affected
b97e8a2f7130a4b30d1502003095833d16c028b3 to before 93955a7788121ab5a0f7f27e988b2ed1135a4866Affected
b97e8a2f7130a4b30d1502003095833d16c028b3 to before 35cb2c6ce7da545f3b5cb1e6473ad7c3a6f08310Affected
c11039edbabdbccf0728844f1002d750d06f9effAffected
6.1.95 to before 6.1.127Affected
6.6.35 to before 6.6.74Affected
6.9.6 to before 6.10Affected

LinuxLinux

6.10Affected
before 6.10Not affected
6.1.127 through 6.1.*Not affected
6.6.74 through 6.6.*Not affected
6.12.11 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.