CVE-2024-27067: xen/evtchn: avoid WARN() when unbinding an event channel
In the Linux kernel, the following vulnerability has been resolved:
xen/evtchn: avoid WARN() when unbinding an event channel
When unbinding a user event channel, the related handler might be called a last time in case the kernel was built with CONFIGDEBUGSHIRQ. This might cause a WARN() in the handler.
Avoid that by adding an "unbinding" flag to struct userevent which will short circuit the handler.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27067?
CVE-2024-27067 has not been assigned a severity rating, but it involves a potential risk in the Linux kernel.
How do I fix CVE-2024-27067?
To address CVE-2024-27067, update the Linux kernel to one of the patched versions listed: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which systems are affected by CVE-2024-27067?
CVE-2024-27067 affects systems running specific versions of the Linux kernel that include the xen/evtchn functionality.
What could happen if CVE-2024-27067 is exploited?
If exploited, CVE-2024-27067 could lead to unexpected behavior when unbinding event channels in the Linux kernel.
Is there a workaround for CVE-2024-27067?
There are no specific workarounds for CVE-2024-27067; the recommended action is to apply the available patches.