Linux Distros Unpatched Vulnerability : CVE-2024-39292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandle...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39292)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39292 advisory. - In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before...

CVE-2024-39292

A vulnerability was found in the Linux kernel's handling of winch IRQs. This issue involves the registration of winch IRQs before adding winch handlers to the winchhandlers list. This oversight could potentially lead to improper IRQ handling and impact system stability or security. This issue has...

CVE-2024-39292

The CVE describes a race in the Linux kernel where registering a winch IRQ could occur before the winch is added to winch_handlers, risking a panic during winch_cleanup if the IRQ is scheduled for a freed winch. The confirmed fix, as detailed in connected advisories, is to add the winch to winch_...

CVE-2024-39292 um: Add winch to winch_handlers before registering winch IRQ

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...