CVE-2024-26813

Summary

CVE-2024-26813 is a vulnerability in the Linux kernel's vfio/platform component. It involves the SET_IRQS ioctl, which allows loopback triggering of an interrupt before a signaling eventfd has been configured, resulting in a NULL pointer dereference. To address this issue, all IRQs are registered in a disabled state during device opening, enabling safe modifications to the trigger and preventing loopback triggering via ioctl. Request_irq() failures are maintained as local to the SET_IRQS ioctl to ensure compatibility with polling mode userspace drivers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.