CVE-2024-44957: xen: privcmd: Switch from mutex to spinlock for irqfds
In the Linux kernel, the following vulnerability has been resolved:
xen: privcmd: Switch from mutex to spinlock for irqfds
irqfdwakeup() gets EPOLLHUP, when it is called by eventfdrelease() by way of wakeuppoll(&ctx->wqh, EPOLLHUP), which gets called under spinlockirqsave(). We can't use a mutex here as it will lead to a deadlock.
Fix it by switching over to a spin lock.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44957?
The severity of CVE-2024-44957 has not been specifically rated, but it affects the Linux kernel's handling of IRQ file descriptors.
How do I fix CVE-2024-44957?
To fix CVE-2024-44957, update to the Linux kernel version 6.12.11-1 or later.
Which Linux kernel versions are affected by CVE-2024-44957?
CVE-2024-44957 affects Linux kernel versions prior to 6.7 and versions from 6.10.5 and below.
What is the impact of CVE-2024-44957?
The impact of CVE-2024-44957 is related to potential race conditions in IRQ handling, which could lead to unexpected behavior.
Is there a workaround for CVE-2024-44957?
There are no specific workarounds mentioned for CVE-2024-44957, so updating the kernel is recommended.