NetSight
IP …
medium5.5

CVE-2024-27067

In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN() when unbinding an event channel When unbinding a user event channe…

Impact

In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN() when unbinding an event channel When unbinding a user event channel, the related handler might be called a last time in case the kernel was built with CONFIG_DEBUG_SHIRQ. This might cause a WARN() in the handler. Avoid that by adding an "unbinding" flag to struct user_event which will short circuit the handler.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.6.19 before 6.6.23
from 6.7 before 6.7.11
from 6.8 before 6.8.2

References