Alpine Linux: CVE-2024-31143: Vulnerability in Multiple Components

Alpine Linux: CVE-2024-31143: Vulnerability in Multiple Components

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

07/18/2024

Created

10/02/2024

Added

10/01/2024

Modified

10/01/2024

Description

An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors.Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go.In this handling an error path could be taken in different situations, with or without a particular lock held.This error path wrongly releases the lock even when it is not currently held.

Solution(s)

• alpine-linux-upgrade-xen

References

• https://attackerkb.com/topics/cve-2024-31143
• CVE - 2024-31143
• https://security.alpinelinux.org/vuln/CVE-2024-31143