Vulnerability feed

Executive summary

This advisory concerns a fix in the Linux kernel's driver for the Arm GICv5 interrupt controller. The flaw could let a long-running interrupt handler or a guest virtual machine block other incoming interrupts, which could cause a denial of service. The advisory does not state a severity score, and the fix is a change to move the priority drop earlier in interrupt handling.

Technical summary

The weakness is an interrupt handling flaw in the GICv5 driver (irq-gic-v5.c) where the priority drop (CDEOI) was performed only during deactivation in irq_eoi(), so interrupts of equal or lower priority could not be signalled while a handler ran. The advisory describes a denial of service effect, for example when a physical interrupt is injected into a guest VM in software, and the attack vector and preconditions beyond this are not stated. The fix moves the CDEOI priority drop to occur immediately after acknowledging an interrupt in gicv5_handle_irq() and removes the earlier CDEOI calls. Affected and fixed kernel version numbers are not stated in the advisory text, and no workaround is stated. No detection guidance or exploitation status is stated.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/abf60331ebe9a9a…72aac7699c2907ab9307

Score

No CVSS score published.

Affects

LinuxARMLinuxLinux kernelARM GICv5