CVE-2024-47731

drivers/perf: Fix ali_drw_pmu driver interrupt status clearing

Description

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing The alibaba_uncore_pmu driver forgot to clear all interrupt status in the interrupt processing function. After the PMU counter overflow interrupt occurred, an interrupt storm occurred, causing the system to hang. Therefore, clear the correct interrupt status in the interrupt handling function to fix it.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.04%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/24f30b34ff76648d26872dd4eaa002f074225058 patch
https://git.kernel.org/stable/c/3b839d4619042b02eecdfc986484ac6e6be6acbf patch
https://git.kernel.org/stable/c/062b7176e484678b2c9072d28fbecea47846b274 patch
https://git.kernel.org/stable/c/85702fddba70d2b63f5646793d77de2ad4fc3784 patch
https://git.kernel.org/stable/c/a3dd920977dccc453c550260c4b7605b280b79c3 patch

Frequently Asked Questions

What is the severity of CVE-2024-47731?
CVE-2024-47731 has been scored as a medium severity vulnerability.
How to fix CVE-2024-47731?
To fix CVE-2024-47731, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-47731 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-47731 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-47731?
CVE-2024-47731 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.