Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-31143

Опубликовано: 18 июл. 2024
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or without a particular lock held. This error path wrongly releases the lock even when it is not currently held.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*
Версия от 4.4.0 (включая)

EPSS

Процентиль: 69%
0.00617
Низкий

7.5 High

CVSS3

Дефекты

CWE-832

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 1 года назад

An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or without a particular lock held. This error path wrongly releases the lock even when it is not currently held.

CVSS3: 7.5
debian
больше 1 года назад

An optional feature of PCI MSI called "Multiple Message" allows a devi ...

CVSS3: 7.5
github
больше 1 года назад

An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or without a particular lock held. This error path wrongly releases the lock even when it is not currently held.

CVSS3: 7.5
fstec
больше 1 года назад

Уязвимость кроссплатформенного гипервизора xen, связанная с неправильной блокировкой, позволяющая нарушителю вызвать отказ в обслуживании

suse-cvrf
больше 1 года назад

Security update for xen

EPSS

Процентиль: 69%
0.00617
Низкий

7.5 High

CVSS3

Дефекты

CWE-832