Linux Kernel PCI Endpoint Test Interrupt Handling Vulnerability

Vulnerability

A vulnerability in the Linux kernel's PCI endpoint test module can lead to improper interrupt management. When the function 'devm_request_irq()' fails, the subsequent call to 'pci_endpoint_test_free_irq_vectors()' incorrectly assumes that all interrupts have been released. This oversight leaves some interrupts unacknowledged, causing residual entries in '/proc/irq/*' that trigger a warning about removing a non-empty directory, indicating a leak of IRQ information. The vulnerability arises from the failure to properly manage interrupt requests, which can lead to inconsistencies in the IRQ handling process.

Impact

Exploitation of this vulnerability can cause a warning message to be generated, indicating a failure to properly clean up interrupt requests, which could potentially be exploited to interfere with the normal operation of the system's interrupt handling.

Remediation

The vulnerability has been addressed by modifying the interrupt handling process to correctly release IRQs before freeing them, ensuring that no residual entries are left in the IRQ management system. Users should apply the latest patches available in the Linux kernel to mitigate this issue.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.