PT-2024-35661 · Linux+7 · Linux Kernel+7
Published
2024-12-27
·
Updated
2025-11-18
·
CVE-2024-53214
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.12.0+
Description
The issue concerns the Linux kernel's handling of PCIe extended capabilities. Specifically, it involves hiding the first capability in the list when it is unknown or intentionally chosen to be hidden from the user. The problem arises when the capability ID is not properly checked later in the vfio config do rw() function, leading to an out-of-bounds access to the ecap perms array. This can result in a warning and potential security issues. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for properly hiding the first-in-list PCIe extended capability.
As a temporary workaround, consider restricting access to the vfio pci config do rw() function until a patch is available.
Avoid using the
cap id variable in the affected API endpoint until the issue is resolved.
At the moment, there is no information about additional mitigation measures.Exploit
Fix
Out of bounds Read
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu