In the Linux kernel, the following vulnerability has been resolved:
xen: privcmd: Fix possible access to a freed kirqfd instance
Nothing prevents simultaneous ioctl calls to privcmd_irqfd_assign() and privcmd_irqfd_deassign(). If that happens, it is possible that a kirqfd created and added to the irqfds_list by privcmd_irqfd_assign() may get removed by another thread executing privcmd_irqfd_deassign(), while the former is still using it after dropping the locks.
This can lead to a situation where an already freed kirqfd instance may be accessed and cause kernel oops.
Use SRCU locking to prevent the same, as is done for the KVM implementation for irqfds.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibmUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04c | Dec 13, 2024 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub