Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42135
HistoryJul 30, 2024 - 7:46 a.m.

CVE-2024-42135 vhost_task: Handle SIGKILL by flushing work and exiting

2024-07-3007:46:30
Linux
github.com
1
linux kernel
cve-2024-42135
vhost_task
sigkill
virtqueue

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

vhost_task: Handle SIGKILL by flushing work and exiting

Instead of lingering until the device is closed, this has us handle
SIGKILL by:

  1. marking the worker as killed so we no longer try to use it with
    new virtqueues and new flush operations.
  2. setting the virtqueue to worker mapping so no new works are queued.
  3. running all the exiting works.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial