Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0024 14.0 —
AFFECTED Product Versions Fixed Linux 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 – — Linux 3.6 – 5.4.274
TIMELINE Feb 25 Reserved by Linux Apr 5 Published (CNA: Linux) Oct 15 ENRICHED — CVE-2024-27437 (Linux). Received CVSS 5.5 and CPE data from NVD.
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in request_irq() and subsequently disabled as necessary to align with the masked status flag. This presents a window where the interrupt could fire between these events, resulting in the IRQ incrementing the disable depth twice. This would be unrecoverable for a user since the masked flag prevents nested enables through vfio. Instead, invert the logic using IRQF_NO_AUTOEN such that exclusive INTx is never auto-enabled, then unmask as required.
| Date | Event | Detail |
|---|---|---|
| February 25, 2024 | Reserved | Reserved by Linux |
| April 5, 2024 | Published | Published (CNA: Linux) |
| October 15, 2026 | ENRICHED | ENRICHED — CVE-2024-27437 (Linux). Received CVSS 5.5 and CPE data from NVD. |
Authoritative record: CVE-2024-27437 at cve.org
Vendors: linux
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-27437 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
