Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27067)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27067 advisory. - In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN when...

CVE-2024-27067 affecting package hyperv-daemons for versions less than 6.6.35.1-1

CVE-2024-27067 affecting package hyperv-daemons for versions less than 6.6.35.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27067

The CVE-2024-27067 issue is in the Linux kernel (xen/evtchn) where unbinding a user event channel could cause a WARN() in the handler if the kernel is built with CONFIG_DEBUG_SHIRQ. The fix adds an "unbinding" flag to struct user_event to short-circuit the handler, preventing the WARN() when unbi...