CVE-2024-31143
Published: 18 July 2024
Summary
CVE-2024-31143 is a high-severity Unlock of a Resource that is not Locked (CWE-832) vulnerability in Xen Xen. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 31.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-29053
Vulnerability details
An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error…
more
path could be taken in different situations, with or without a particular lock held. This error path wrongly releases the lock even when it is not currently held.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.