exploitDog

CVE-2024-53240

Опубликовано: 24 дек. 2024

Источник: nvd

CVSS3: 5.7

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

xen/netfront: fix crash when removing device

When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time.

Fix that by checking the queues are existing before trying to stop them.

This is XSA-465 / CVE-2024-53240.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.19.269 (включая) до 4.20 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.4.227 (включая) до 5.4.288 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.10.159 (включая) до 5.10.232 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15.83 (включая) до 5.15.175 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.0.13 (включая) до 6.1 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.1.1 (включая) до 6.1.121 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.67 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.6 (исключая)

cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00225

Низкий

5.7 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2024-53240

CVSS3: 5.7

ubuntu

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240.

CVE-2024-53240

CVSS3: 6.8

redhat

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240.

CVE-2024-53240

CVSS3: 5.7

debian

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: x ...

GHSA-prjx-w4x5-gf5v

CVSS3: 5.7

github

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240.

BDU:2024-11483

CVSS3: 6.8

fstec

11 месяцев назад

Уязвимость драйвера xen-netfront (drivers/net/xen-netfront.c) гипервизора Xen операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 45%

0.00225

Низкий

5.7 Medium

CVSS3

Дефекты

NVD-CWE-noinfo