In the Linux kernel, the following vulnerability has been resolved:
xen: privcmd: Switch from mutex to spinlock for irqfds
irqfd_wakeup() gets EPOLLHUP, when it is called by eventfd_release() by way of wake_up_poll(&ctx->wqh, EPOLLHUP), which gets called under spin_lock_irqsave(). We can't use a mutex here as it will lead to a deadlock.
Fix it by switching over to a spin lock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Sep 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 4, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04 | Dec 13, 2024 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub