CVE-2024-57949

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()

The following call-chain leads to enabling interrupts in a nested interrupt disabled section:

irq_set_vcpu_affinity() irq_get_desc_lock() raw_spin_lock_irqsave() <--- Disable interrupts its_irq_set_vcpu_affinity() guard(raw_spinlock_irq) <--- Enables interrupts when leaving the guard() irq_put_desc_unlock() <--- Warns because interrupts are enabled

This was broken in commit b97e8a2f7130, which replaced the original raw_spin_[un]lock() pair with guard(raw_spinlock_irq).

Fix the issue by using guard(raw_spinlock).

[ tglx: Massaged change log ]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-57956.5A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustionCVE-2024-579505.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize denominator defaults to 1 [WHAT & HOW] VarCVE-2024-579517.8In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario whCVE-2024-579525.5In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The currenCVE-2024-579535.5In the Linux kernel, the following vulnerability has been resolved: rtc: tps6594: Fix integer overflow on 32bit systems The problem is thiCVE-2024-579547.5Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service cCVE-2024-579557.5Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentialitCVE-2024-579567.5Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availabilCVE-2024-579577.5Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affecCVE-2024-579589.1Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perforCVE-2024-579599.8Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to performCVE-2024-57966.4The Infinite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘project_url’ parameter in all versions up to, and inc
CVE-2024-57949: Medium severity, CVSS 5.5 | Vulnix