Riskcovery

CVE-2024-27067

xen/evtchn: avoid WARN() when unbinding an event channel

State
Published
Severity
Not scored
Published
May 1, 2024
Updated
May 23, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xen/evtchn: avoid WARN() when unbinding an event channel

When unbinding a user event channel, the related handler might be called a last time in case the kernel was built with CONFIG_DEBUG_SHIRQ. This might cause a WARN() in the handler.

Avoid that by adding an "unbinding" flag to struct user_event which will short circuit the handler.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3c8f5965a99397368d3762a9814a21a3e442e1a4 to before 99e425032c6ec13584d3cd33846e0c7307501b47Affected
  • 9e90e58c11b74c2bddac4b2702cf79d36b981278 to before 35485dad6e28f9b17884764d4692b1655cb848d0Affected
  • 9e90e58c11b74c2bddac4b2702cf79d36b981278 to before 9e2d4b58c1da48a32905802aaeadba7084b46895Affected
  • 9e90e58c11b74c2bddac4b2702cf79d36b981278 to before 51c23bd691c0f1fb95b29731c356c6fd69925d17Affected
  • 6.6.19 to before 6.6.23Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.