CVE-2024-46761

pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv

published September 18, 2024

CVSS
—
EPSS
0%
Percentile
15.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv

The hotplug driver for powerpc (pci/hotplug/pnv_php.c) causes a kernel

crash when we try to hot-unplug/disable the PCIe switch/bridge from

the PHB.

The crash occurs because although the MSI data structure has been

released during disable/hot-unplug path and it has been assigned

with NULL, still during unregistration the code was again trying to

explicitly disable the MSI which causes the NULL pointer dereference and

kernel crash.

The patch fixes the check during unregistration path to prevent invoking

pci_disable_msi/msix() since its data structure is already freed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.6th percentile
Published
2024-09-18T07:12Z
EPSS history
Timeline
  • 18 SEP 07:12Z
    pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
    cvelistv5