Lucene search
+L

102 matches found

CVE
CVE
added 2024/09/18 7:12 a.m.137 views

CVE-2024-46762

CVE-2024-46762 describes a Linux kernel issue in the Xen driver support (privcmd) where simultaneous calls to privcmd_irqfd_assign() and privcmd_irqfd_deassign() could lead to use-after-free of a kirqfd instance, potentially causing a kernel oops. The root cause is a lack of proper synchronizatio...

7.8CVSS5.1AI score0.00245EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/09/18 7:12 a.m.15 views

CVE-2024-46762 xen: privcmd: Fix possible access to a freed kirqfd instance

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmdirqfdassign and privcmdirqfddeassign. If that happens, it is possible that a kirqfd created and added to the...

7.8CVSS6AI score
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2024/09/05 2:47 a.m.6 views

SUSE CVE-2024-44957

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

5.5CVSS7.6AI score0.00164EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2024/09/04 8:45 p.m.16 views

CVE-2024-44957

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-;wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as ...

5.5CVSS5.4AI score0.00164EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/04 7:15 p.m.10 views

AZL-48789 CVE-2024-44957 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

5.5CVSS6.2AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/04 7:15 p.m.23 views

CVE-2024-44957

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

5.5CVSS0.00164EPSS
SaveExploits0References3
OSV
OSV
added 2024/09/04 7:15 p.m.1 views

DEBIAN-CVE-2024-44957

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

5.5CVSS5.6AI score0.00164EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/04 7:15 p.m.7 views

UBUNTU-CVE-2024-44957

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

5.5CVSS6.5AI score0.00164EPSS
SaveExploits0References11
CVE
CVE
added 2024/09/04 6:35 p.m.141 views

CVE-2024-44957

CVE-2024-44957 is a Linux kernel issue affecting the Xen privcmd path, where irqfds handling could deadlock if mutexes were used under spin_lock_irqsave. The root cause is switching the synchronization primitive for irqfd wakeups from a mutex to a spinlock, due to EPOLLHUP being delivered to irqf...

5.5CVSS5.2AI score0.00164EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/09/04 6:35 p.m.12 views

CVE-2024-44957 xen: privcmd: Switch from mutex to spinlock for irqfds

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

6.1AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2024/09/04 6:35 p.m.41 views

CVE-2024-44957

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

5.5CVSS5.6AI score0.00164EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/09/04 6:35 p.m.18 views

CVE-2024-44957 xen: privcmd: Switch from mutex to spinlock for irqfds

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

7.2AI score0.00164EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/09/04 6:35 p.m.31 views

CVE-2024-44957 xen: privcmd: Switch from mutex to spinlock for irqfds

In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfdwakeup gets EPOLLHUP, when it is called by eventfdrelease by way of wakeuppoll&ctx-wqh, EPOLLHUP, which gets called under spinlockirqsave. We can't use a mutex here as i...

0.00164EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/09/04 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a deadlock issue in the xen:privcmd component that may result from the use of mutually exclusive locks. No...

5.5CVSS6.6AI score0.00164EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/06/18 12:0 a.m.9 views

PT-2024-32177

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description The issue is related to the Linux kernel, specifically the xen: privcmd component. It allows for possible access to a freed kirqfd instance due to simultaneous ioctl calls to privcmd irqfd assi...

5.5CVSS5.4AI score0.00245EPSS
SaveExploits0
OSV
OSV
added 2023/01/17 6:51 p.m.17 views

GSD-2023-1001192 xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()

xen/privcmd: Fix a possible warning in privcmdioctlmmapresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.6 views

PT-2023-33896 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential issue exists in the privcmd ioctl mmap resource function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

7.2AI score
SaveExploits0References1
OSV
OSV
added 2022/09/17 12:22 a.m.9 views

GSD-2022-1005738 xen/privcmd: fix error exit of privcmd_ioctl_dm_op()

xen/privcmd: fix error exit of privcmdioctldmop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/09/16 11:56 p.m.13 views

GSD-2022-1005433 xen/privcmd: fix error exit of privcmd_ioctl_dm_op()

xen/privcmd: fix error exit of privcmdioctldmop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/09/16 11:25 p.m.14 views

GSD-2022-1005024 xen/privcmd: fix error exit of privcmd_ioctl_dm_op()

xen/privcmd: fix error exit of privcmdioctldmop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

7.2AI score
SaveExploits0
Rows per page
Query Builder