CVE-2024-36950

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

firewire: ohci: mask bus reset interrupts between ISR and bottom half

In the FireWire OHCI interrupt handler, if a bus reset interrupt has

occurred, mask bus reset interrupts until bus_reset_work has serviced and

cleared the interrupt.

Normally, we always leave bus reset interrupts masked. We infer the bus

reset from the self-ID interrupt that happens shortly thereafter. A

scenario where we unmask bus reset interrupts was introduced in 2008 in

a007bb857e0b26f5d8b73c2ff90782d9c0972620: If

OHCI_PARAM_DEBUG_BUSRESETS (8) is set in the debug parameter bitmask, we

will unmask bus reset interrupts so we can log them.

irq_handler logs the bus reset interrupt. However, we can't clear the bus

reset event flag in irq_handler, because we won't service the event until

later. irq_handler exits with the event flag still set. If the

corresponding interrupt is still unmasked, the first bus reset will

usually freeze the system due

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References