CVE-2024-41064

powerpc/eeh: avoid possible crash when edev->pdev changes

MEDIUM
5.5
CVSS Score
Published: July 29, 2024 at 02:57 PM UTC
Updated: August 5, 2026 at 12:04 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev->pdev changes If a PCI device is removed during eeh_pe_report_edev(), edev->pdev will change and can cause a crash, hold the PCI rescan/remove lock while taking a copy of edev->pdev->bus.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.4.2813.7 ≤ v < 5.10.2233.7 ≤ v < 5.15.1643.7 ≤ v < 5.4.2813.7 ≤ v < 6.1.1013.7 ≤ v < 6.103.7 ≤ v < 6.6.423.7 ≤ v < 6.9.115.11 ≤ v < 5.15.1645.16 ≤ v < 6.1.1015.5 ≤ v < 5.10.2236.2 ≤ v < 6.6.426.7 ≤ v < 6.9.113.79b3c76f08122f5efdbe4992a64b8478cc92dd983
Vendor states this is fixed in 033c51dfdbb6b79ab43fb3587276fa82d0a329e1 (fixed)
Vendor states this is fixed in 428d940a8b6b3350b282c14d3f63350bde65c48b (fixed)
Vendor states this is fixed in 4bc246d2d60d071314842fa448faa4ed39082aff (fixed)
Vendor states this is fixed in 4fad7fef847b6028475dd7b4c14fcb82b3e51274 (fixed)
Vendor states this is fixed in 8836e1bf5838ac6c08760e0a2dd7cf6410aa7ff3 (fixed)
Vendor states this is fixed in a1216e62d039bf63a539bbe718536ec789a853dd (fixed)
Vendor states this is fixed in f23c3d1ca9c4b2d626242a4e7e1ec1770447f7b5 (fixed)
Vendor states this is fixed in 3.7 (unaffected)
Vendor states this is fixed in 5.10.223 (unaffected)
Vendor states this is fixed in 5.15.164 (unaffected)
Vendor states this is fixed in 5.4.281 (unaffected)
Vendor states this is fixed in 6.1.101 (unaffected)
Vendor states this is fixed in 6.10 (unaffected)
Vendor states this is fixed in 6.6.42 (unaffected)
Vendor states this is fixed in 6.9.11 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/033c51dfdbb6b79ab43fb3587276fa82d0a329e1
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/428d940a8b6b3350b282c14d3f63350bde65c48b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4bc246d2d60d071314842fa448faa4ed39082aff
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4fad7fef847b6028475dd7b4c14fcb82b3e51274
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8836e1bf5838ac6c08760e0a2dd7cf6410aa7ff3
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a1216e62d039bf63a539bbe718536ec789a853dd
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f23c3d1ca9c4b2d626242a4e7e1ec1770447f7b5
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card