NetSight
IP …
high7.8

CVE-2024-39292

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is rac…

Impact

In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winch_handlers list. If that happens, register_winch_irq() adds to that list a winch that is scheduled to be (or has already been) freed, causing a panic later in winch_cleanup(). Avoid the race by adding the winch to the winch_handlers list before registering the IRQ, and rolling back if um_request_irq() fails.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.23
from 4.19 before 4.19.316
from 5.4 before 5.4.278
from 5.10 before 5.10.219
from 5.15 before 5.15.161
from 6.1 before 6.1.93

Weakness classification

CWE-415

References