CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's KVM component, specifically related to the handling of IRQFD (interrupt request file descriptor) when updating the Interrupt Routing Table Entry (IRTE). A failure in this update can lead to a use-after-free condition due to a dangling pointer, potentially allowing an attacker to exploit the system. Organizations utilizing KVM on Linux should prioritize this issue to mitigate risks associated with potential privilege escalation or system instability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Nullify irqfd->producer if updating the IRTE for bypass fails, as leaving a dangling pointer will result in a use-after-free if the irqfd is reachable through KVM's routing, but the producer is freed separately. E.g. for VFIO PCI, the producer is embedded in struct "vfio_pci_irq_ctx" and freed when the vector is disabled, which can happen independent of routing updates. [sean: drop PPC change, massage changelog]