In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently to hot-removal of the same portion of the hierarchy: The dpc_handler() awaits readiness of the secondary bus below the Downstream Port where the DPC event occurred. To do so, it polls the config space of the first child device on the secondary bus. If that child device is concurrently removed, a…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/11a1f4bc47362700fcbde717292158873fb847ed Patch
- https://git.kernel.org/stable/c/2c111413f38ca5cf87557cab89f6d82b0e3433e7 Patch
- https://git.kernel.org/stable/c/2cc8973bdc4d6c928ebe38b88090a2cdfe81f42f Patch
- https://git.kernel.org/stable/c/b16f3ea1db47a6766a9f1169244cf1fc287a7c62 Patch
- https://git.kernel.org/stable/c/c52f9e1a9eb40f13993142c331a6cfd334d4b91d Patch
- https://git.kernel.org/stable/c/f63df70b439bb8331358a306541893bf415bf1da Patch
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html Mailing List
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html Mailing List
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
Timeline
- nvd_ingest NVD