PT-2021-8279 · Linux+6 · Linux Kernel+6
Published
2021-03-25
·
Updated
2024-08-20
·
CVE-2021-46909
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the Linux kernel, specifically with the PCI interrupt mapping in the ARM footbridge. Since a particular commit, the PCI code calls the IRQ mapping function whenever a PCI driver is probed. If these are marked as init, this causes an oops if a PCI driver is loaded or bound after the kernel has initialized. The vulnerability is associated with insufficient checking of unusual or exceptional states, which could allow an attacker to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Check for Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Rocky Linux
Suse