Debian: CVE-2024-31143: xen -- security update

Debian: CVE-2024-31143: xen -- security update

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

07/18/2024

Created

12/31/2024

Added

12/30/2024

Modified

12/30/2024

Description

An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors.Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go.In this handling an error path could be taken in different situations, with or without a particular lock held.This error path wrongly releases the lock even when it is not currently held.

Solution(s)

• debian-upgrade-xen

References

• https://attackerkb.com/topics/cve-2024-31143
• CVE - 2024-31143
• DSA-5836-1