NetSight
medium5.7

CVE-2024-53240

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after…

Impact

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19.269 before 4.20
from 5.4.227 before 5.4.288
from 5.10.159 before 5.10.232
from 5.15.83 before 5.15.175
from 6.0.13 before 6.1
from 6.1.1 before 6.1.121

References