CVE-2024-46762: xen: privcmd: Fix possible access to a freed kirqfd instance
First published: Wed Sep 18 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmd_irqfd_assign() and privcmd_irqfd_deassign(). If that happens, it is possible that a kirqfd created and added to the irqfds_list by privcmd_irqfd_assign() may get removed by another thread executing privcmd_irqfd_deassign(), while the former is still using it after dropping the locks. This can lead to a situation where an already freed kirqfd instance may be accessed and cause kernel oops. Use SRCU locking to prevent the same, as is done for the KVM implementation for irqfds.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <6.6.51 | |
| Linux Linux kernel | >=6.7<6.10.10 | |
| debian/linux | <=5.10.223-1<=5.10.226-1<=6.1.115-1<=6.1.119-1 | 6.11.10-1 6.12.5-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/112fd2f02b308564724b8e81006c254d20945c4b
- https://git.kernel.org/stable/c/611ff1b1ae989a7bcce3e2a8e132ee30e968c557
- https://git.kernel.org/stable/c/e997b357b13a7d95de31681fc54fcc34235fa527
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46762
- https://nvd.nist.gov/vuln/detail/CVE-2024-46762
- https://launchpad.net/bugs/cve/CVE-2024-46762
- https://security-tracker.debian.org/tracker/CVE-2024-46762
- https://ubuntu.com/security/CVE-2024-46762
- https://git.kernel.org/linus/611ff1b1ae989a7bcce3e2a8e132ee30e968c557
- agent/title
- agent/first-publish-date
- agent/type
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/remedy
- agent/severity
- agent/weakness
- collector/launchpad-cve
- source/Launchpad
- agent/references
- agent/author
- collector/nvd-cve
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/tags
- collector/usn-cve
- source/Ubuntu
- agent/event
- agent/description
- collector/security-tracker-debian
- source/Debian
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/6.7
- package-manager/debian