In the Linux kernel, the following vulnerability has been resolved:
um: Add winch to winch_handlers before registering winch IRQ
Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winch_handlers list.
If that happens, register_winch_irq() adds to that list a winch that is scheduled to be (or has already been) freed, causing a panic later in winch_cleanup().
Avoid the race by adding the winch to the winch_handlers list before registering the IRQ, and rolling back if um_request_irq() fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 24, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 24, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-41-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-6.8.0-1012-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1013-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1071-azureUpgrade linux-image-6.8.0-41-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1012-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-6.8.0-41-genericUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-6.8.0-1011-oracle-64kUpgrade linux-image-6.8.0-1012-nvidia-lowlatencyUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-awsUpgrade linux-image-6.8.0-41-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-1135-awsUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-6.8.0-1012-nvidiaUpgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1068-awsUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-6.8.0-1014-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1011-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1011-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-6.8.0-1010-raspiUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-6.8.0-1009-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04 | Aug 9, 2024 | Jun 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub