In the Linux kernel, the following vulnerability has been resolved:
xen: privcmd: Switch from mutex to spinlock for irqfds
irqfd_wakeup() gets EPOLLHUP, when it is called by eventfd_release() by way of wake_up_poll(&ctx->wqh, EPOLLHUP), which gets called under spin_lock_irqsave(). We can't use a mutex here as it will lead to a deadlock.
Fix it by switching over to a spin lock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Sep 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 4, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-hwe-22.04 | Dec 13, 2024 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub