CVE-2024-31143

Katalog CVE

CVSS 7.5 · High EPSS 0,51%

Kerentanan Unlock of a Resource that is not Locked pada xen. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or without a particular lock held. This error path wrongly releases the lock even when it is not currently held.

Rincian

Terbit di NVD

18 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-832: Unlock of a Resource that is not Locked

EPSS (30 hari)

0,51% peluang dieksploitasi; lebih tinggi dari 41,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://xenbits.xenproject.org/xsa/advisory-458.html patch · advisory vendor
• http://xenbits.xen.org/xsa/advisory-458.html patch · advisory vendor
• http://www.openwall.com/lists/oss-security/2024/07/16/3 mailing list · advisory pihak ketiga