CVE-2024-56760

Summary

CVE-2024-56760 is a vulnerability affecting the Linux kernel's PCI/MSI (Message Signaled Interrupts) subsystem. The issue stems from a legacy fallback assumption in the PCI/MSI layer that can lead to a bogus warning being emitted on certain platforms, such as RISCV, that do not provide PCI/MSI support. This warning triggers due to a check for MSI-X, which assumes legacy support, but should return an error instead. Some weak implementations have papered over the problem by enabling legacy support without implementing the necessary fallbacks. The vulnerability can be mitigated by correcting the pci_msi_domain_supports() function to evaluate the legacy mode and adding the missing supported check into the MSI enable path.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.