CVE-2024-27030: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-27030 affects the Linux kernel's octeontx2-af driver, where a race condition vulnerability was discovered. The issue exists because the same interrupt handler is registered for both PF to AF interrupt vector and VF to AF vector. The vulnerability was discovered on May 1, 2024, and affects Linux kernel versions from 4.20 up to versions before 5.4.273, 5.10.214, 5.15.153, and 6.1.83 (NVD).

The vulnerability stems from a race condition in the interrupt handling mechanism of the octeontx2-af driver. When two interrupts are raised to two CPUs simultaneously, two cores serve the same event, leading to data corruption. The issue has been assigned a CVSS v3.1 base score of 6.3 (Medium), with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H, indicating local access required with high attack complexity (NVD).

The vulnerability can result in data corruption when multiple CPUs handle interrupts simultaneously. This occurs specifically when two interrupts are raised to two CPUs at the same time, causing both cores to service the same event and potentially corrupting the data in the process (Kernel Patch).

The vulnerability requires local access and high attack complexity to exploit. An attacker would need to have local access to the system and the ability to trigger simultaneous interrupts to multiple CPUs to potentially cause data corruption (NVD).

The vulnerability has been fixed by implementing separate handlers for interrupts. The fix involves creating a dedicated handler for PF interrupts (rvu_mbox_pf_intr_handler) and maintaining the existing handler for VF interrupts. This separation prevents the race condition that was causing data corruption (Kernel Patch).