CVE-2024-38580: epoll: be better about file lifetimes

Q: What is the severity of CVE-2024-38580?

CVE-2024-38580 has a high severity rating due to the potential for race conditions affecting file lifetimes in the Linux kernel.

Q: Which Linux kernel versions are affected by CVE-2024-38580?

CVE-2024-38580 affects multiple Linux kernel versions including versions prior to 5.15.161, 6.1.93, 6.6.33, 6.8.12, and 6.9.

Q: How do I fix CVE-2024-38580?

To fix CVE-2024-38580, update your system to a kernel version that is patched, such as 5.15.161 or later, 6.1.93 or later, or apply specific updates provided by your distribution.

Q: What systems are impacted by CVE-2024-38580?

CVE-2024-38580 impacts systems running affected versions of the Linux kernel, commonly in Red Hat and Debian distributions.

Q: Is there a workaround for CVE-2024-38580?

There are no known effective workarounds for CVE-2024-38580, so the recommended action is to upgrade to a patched kernel version.

Published Jun 19, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

epoll: be better about file lifetimes

epoll can call out to vfspoll() with a file pointer that may race with the last 'fput()'. That would make fcount go down to zero, and while the ep->mtx locking means that the resulting file pointer tear-down will be blocked until the poll returns, it means that fcount is already dead, and any use of it won't actually get a reference to the file any more: it's dead regardless.

Make sure we have a valid ref on the file pointer before we call down to vfspoll() from the epoll routines.

Other sources

In the Linux kernel, the following vulnerability has been resolved:

epoll: be better about file lifetimes

The Linux kernel CVE team has assigned CVE-2024-38580 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024061948-CVE-2024-38580-d87f@gregkh/T

— Red Hat

Affected Software

214 affected componentsFixes available

Linux Linux kernel<5.15.161

Linux Linux kernel>=5.16<6.1.93

Linux Linux kernel>=6.2<6.6.33

Linux Linux kernel>=6.7<6.8.12

Linux Linux kernel=6.9-rc1

Linux Linux kernel=6.9-rc2

Linux Linux kernel=6.9-rc3

Linux Linux kernel=6.9-rc4

Linux Linux kernel=6.9-rc5

Linux Linux kernel=6.9-rc6

redhat/kernel<5.15.161

5.15.161

redhat/kernel<6.1.93

6.1.93

redhat/kernel<6.6.33

6.6.33

redhat/kernel<6.8.12

6.8.12

redhat/kernel<6.9

6.9

debian/linux<6.1.94-1

6.1.94-1

debian/linux<6.8.12-1

6.8.12-1

debian/linux<6.8.12-1

6.8.12-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-azure*

ubuntu/linux-lts-xenial*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-hwe*

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-kvm*

ubuntu/linux-oracle*

ubuntu/linux-fips*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4*

ubuntu/linux-azure*

ubuntu/linux-azure-4.15*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4*

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4*

ubuntu/linux-kvm*

ubuntu/linux-oem*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4*

ubuntu/linux-raspi-5.4*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-5.15<5.15.0-1069.75~20.04.1

5.15.0-1069.75~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1072.81~20.04.1

5.15.0-1072.81~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1068.76~20.04.1

5.15.0-1068.76~20.04.1

ubuntu/linux-gkeop-5.15<5.15.0-1052.59~20.04.1

5.15.0-1052.59~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-121.131~20.04.1

5.15.0-121.131~20.04.1

ubuntu/linux-ibm-5.15<5.15.0-1062.65~20.04.1

5.15.0-1062.65~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1064.70~20.04.1

5.15.0-1064.70~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-121.131~20.04.1

5.15.0-121.131~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1030.30~20.04.1

5.15.0-1030.30~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1067.73~20.04.1

5.15.0-1067.73~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1065.69~20.04.1

5.15.0-1065.69~20.04.1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-bluefield*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm*

ubuntu/linux-intel-5.13*

ubuntu/linux-iot*

ubuntu/linux-kvm*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-xilinx-zynqmp*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-121.131

5.15.0-121.131

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1069.75

5.15.0-1069.75

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1013.14~22.04.1

6.8.0-1013.14~22.04.1

ubuntu/linux-azure<5.15.0-1072.81

5.15.0-1072.81

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1012.14~22.04.1

6.8.0-1012.14~22.04.1

ubuntu/linux-azure-fde<5.15.0-1072.81.1

5.15.0-1072.81.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1068.76

5.15.0-1068.76

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1012.13~22.04.1

6.8.0-1012.13~22.04.1

ubuntu/linux-gke<5.15.0-1066.72

5.15.0-1066.72

ubuntu/linux-gkeop<5.15.0-1052.59

5.15.0-1052.59

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-40.40~22.04.3

6.8.0-40.40~22.04.3

ubuntu/linux-ibm<5.15.0-1062.65

5.15.0-1062.65

ubuntu/linux-ibm-6.8<6.8.0-1010.10~22.04.1

6.8.0-1010.10~22.04.1

ubuntu/linux-intel-iotg<5.15.0-1064.70

5.15.0-1064.70

ubuntu/linux-kvm<5.15.0-1066.71

5.15.0-1066.71

ubuntu/linux-lowlatency<5.15.0-121.131

5.15.0-121.131

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-40.40.1~22.04.1

6.8.0-40.40.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1064.65

5.15.0-1064.65

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1011.11~22.04.1

6.8.0-1011.11~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1028.28

5.15.0-1028.28

ubuntu/linux-nvidia-tegra-igx<5.15.0-1016.16

5.15.0-1016.16

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1067.73

5.15.0-1067.73

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1010.10~22.04.1

6.8.0-1010.10~22.04.1

ubuntu/linux-raspi<5.15.0-1062.65

5.15.0-1062.65

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-40.40.1~22.04.1

6.8.0-40.40.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1035.39

5.15.0-1035.39

ubuntu/linux-bluefield<5.15.0-1052.54

5.15.0-1052.54

ubuntu/linux-intel-iot-realtime<5.15.0-1063.65

5.15.0-1063.65

ubuntu/linux-realtime<5.15.0-1070.78

5.15.0-1070.78

ubuntu/linux-realtime-6.8<6.8.1-1006.6~22.04.1

6.8.1-1006.6~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1069.75+fips1

5.15.0-1069.75+fips1

ubuntu/linux-azure-fips<5.15.0-1072.81+fips1

5.15.0-1072.81+fips1

ubuntu/linux-fips<5.15.0-121.131+fips1

5.15.0-121.131+fips1

ubuntu/linux-gcp-fips<5.15.0-1068.76+fips1

5.15.0-1068.76+fips1

ubuntu/linux<6.8.0-40.40

6.8.0-40.40

ubuntu/linux-aws<6.8.0-1013.14

6.8.0-1013.14

ubuntu/linux-azure<6.8.0-1012.14

6.8.0-1012.14

ubuntu/linux-gcp<6.8.0-1012.13

6.8.0-1012.13

ubuntu/linux-gke<6.8.0-1008.11

6.8.0-1008.11

ubuntu/linux-ibm<6.8.0-1010.10

6.8.0-1010.10

ubuntu/linux-lowlatency<6.8.0-40.40.1

6.8.0-40.40.1

ubuntu/linux-nvidia<6.8.0-1011.11

6.8.0-1011.11

ubuntu/linux-nvidia-lowlatency<6.8.0-1011.11.1

6.8.0-1011.11.1

ubuntu/linux-oem-6.8<6.8.0-1010.10

6.8.0-1010.10

ubuntu/linux-oracle<6.8.0-1010.10

6.8.0-1010.10

ubuntu/linux-raspi<6.8.0-1009.10

6.8.0-1009.10

ubuntu/linux-riscv<6.8.0-40.40.1

6.8.0-40.40.1

ubuntu/linux-raspi-realtime<6.8.0-2008.8

6.8.0-2008.8

ubuntu/linux-realtime<6.8.1-1006.6

6.8.1-1006.6

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 5.15.161
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.1.93
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.6.33
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.8.12
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.9
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.94-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.8.12-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.75~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.81~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.76~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.59~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-121.131~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.65~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.70~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-121.131~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.30~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.69~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-121.131
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.75
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1013.14~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.81
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.14~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.81.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.76
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.13~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.72
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.59
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40~22.04.3
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.65
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.70
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.71
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-121.131
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.65
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.11~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1028.28
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1016.16
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.65
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.39
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.54
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1063.65
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.78
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1006.6~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.75+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.81+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-121.131+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.76+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1013.14
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.14
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1012.13
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.11
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.11
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1011.11.1
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1009.10
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-40.40.1
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2008.8
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1006.6
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Upgrade
Upgrade Linux kernel to a version that resolves this vulnerability.
Patch CVE-2024-38580

Event History

Jun 19, 2024

CVE Published

via MITRE·01:37 PM

Data Sourced

via MITRE·01:37 PM

DescriptionSeverity

Data Sourced

via OSV·02:15 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·02:15 PM

Description

Jun 20, 2024

Data Sourced

via Red Hat·03:03 PM

DescriptionSeverityAffected Software

Aug 4, 2026

Data Sourced

via NVD·11:18 AM

RemedySeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-38580?

CVE-2024-38580 has a high severity rating due to the potential for race conditions affecting file lifetimes in the Linux kernel.

Which Linux kernel versions are affected by CVE-2024-38580?

CVE-2024-38580 affects multiple Linux kernel versions including versions prior to 5.15.161, 6.1.93, 6.6.33, 6.8.12, and 6.9.

How do I fix CVE-2024-38580?

To fix CVE-2024-38580, update your system to a kernel version that is patched, such as 5.15.161 or later, 6.1.93 or later, or apply specific updates provided by your distribution.

What systems are impacted by CVE-2024-38580?

CVE-2024-38580 impacts systems running affected versions of the Linux kernel, commonly in Red Hat and Debian distributions.

Is there a workaround for CVE-2024-38580?

There are no known effective workarounds for CVE-2024-38580, so the recommended action is to upgrade to a patched kernel version.

CVE-2024-38580: epoll: be better about file lifetimes

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2024-38580?

Which Linux kernel versions are affected by CVE-2024-38580?

How do I fix CVE-2024-38580?

What systems are impacted by CVE-2024-38580?

Is there a workaround for CVE-2024-38580?

Company

Resources

Contact