CVE-2024-42135: vhost_task: Handle SIGKILL by flushing work and exiting
In the Linux kernel, the following vulnerability has been resolved:
vhosttask: Handle SIGKILL by flushing work and exiting
Instead of lingering until the device is closed, this has us handle SIGKILL by:
1. marking the worker as killed so we no longer try to use it with new virtqueues and new flush operations. 2. setting the virtqueue to worker mapping so no new works are queued. 3. running all the exiting works.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42135?
CVE-2024-42135 is classified with a medium severity due to its potential impact on system stability.
How do I fix CVE-2024-42135?
To mitigate CVE-2024-42135, upgrade to Linux kernel version 6.12.10-1 or 6.12.11-1.
Which Linux distributions are affected by CVE-2024-42135?
CVE-2024-42135 affects various Debian releases utilizing the vulnerable Linux kernel versions.
What functionality does CVE-2024-42135 impact in the Linux kernel?
CVE-2024-42135 impacts the handling of SIGKILL in vhost tasks, affecting worker termination behavior.
When was CVE-2024-42135 announced?
CVE-2024-42135 was announced as a vulnerability in the Linux kernel and is addressed in recent updates.