CVE-2021-46953

ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the driver probe because of invalid firmware properties, the GTDT driver unmaps the interrupt that it mapped earlier. However, it never checks whether the mapping of the interrupt actially succeeded. Even more, should the firmware report an illegal interrupt number that overlaps with the GIC SGI range, this can result in an IPI being unmapped, and subsequent fireworks (as reported by Dann Frazier). Rework the driver to have a slightly saner behaviour and actually check whether the interrupt has been mapped before unmapping things.

6.7

CVSS

Severity: Medium

CVSS 3.1 •

EPSS 0.01%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/c3385a9122f8db15b453e07bfc88117fce7f3724	patch
https://git.kernel.org/stable/c/7b2162db1498c71962a4bb2f776fa4e76d4d305b	patch
https://git.kernel.org/stable/c/504632a3577a049dd9bb7aabae5b4476f9c586b4	patch
https://git.kernel.org/stable/c/e0f2d86481eaa83df33b0793f75212919db7a19d	patch
https://git.kernel.org/stable/c/42e69521ee1fa5abf21f478d147d06bbfe6bf6a8	patch
https://git.kernel.org/stable/c/596e079c362ac17ed02aa1b99fdc444d62072a01	patch
https://git.kernel.org/stable/c/1ecd5b129252249b9bc03d7645a7bda512747277	patch

Frequently Asked Questions

What is the severity of CVE-2021-46953?: CVE-2021-46953 has been scored as a medium severity vulnerability.
How to fix CVE-2021-46953?: To fix CVE-2021-46953, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-46953 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2021-46953 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2021-46953?: CVE-2021-46953 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.