cve-2024-27067
Vulnerability from cvelistv5
Published
2024-05-01 13:04
Modified
2024-12-19 08:53
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN() when unbinding an event channel When unbinding a user event channel, the related handler might be called a last time in case the kernel was built with CONFIG_DEBUG_SHIRQ. This might cause a WARN() in the handler. Avoid that by adding an "unbinding" flag to struct user_event which will short circuit the handler.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/35485dad6e28f9b17884764d4692b1655cb848d0
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/51c23bd691c0f1fb95b29731c356c6fd69925d17
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/99e425032c6ec13584d3cd33846e0c7307501b47
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9e2d4b58c1da48a32905802aaeadba7084b46895
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/35485dad6e28f9b17884764d4692b1655cb848d0
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/51c23bd691c0f1fb95b29731c356c6fd69925d17
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/99e425032c6ec13584d3cd33846e0c7307501b47
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9e2d4b58c1da48a32905802aaeadba7084b46895
Impacted products
Vendor Product Version
Linux Linux Version: 3c8f5965a99397368d3762a9814a21a3e442e1a4
Version: 9e90e58c11b74c2bddac4b2702cf79d36b981278
Version: 9e90e58c11b74c2bddac4b2702cf79d36b981278
Version: 9e90e58c11b74c2bddac4b2702cf79d36b981278
 Create a notification for this product.
   Linux Linux Version: 6.7
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-27067",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-17T17:40:05.117300Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-17T17:45:14.642Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T00:27:57.836Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/99e425032c6ec13584d3cd33846e0c7307501b47",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/35485dad6e28f9b17884764d4692b1655cb848d0",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/9e2d4b58c1da48a32905802aaeadba7084b46895",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/51c23bd691c0f1fb95b29731c356c6fd69925d17",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Linux",
               programFiles: [
                  "drivers/xen/evtchn.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "99e425032c6ec13584d3cd33846e0c7307501b47",
                     status: "affected",
                     version: "3c8f5965a99397368d3762a9814a21a3e442e1a4",
                     versionType: "git",
                  },
                  {
                     lessThan: "35485dad6e28f9b17884764d4692b1655cb848d0",
                     status: "affected",
                     version: "9e90e58c11b74c2bddac4b2702cf79d36b981278",
                     versionType: "git",
                  },
                  {
                     lessThan: "9e2d4b58c1da48a32905802aaeadba7084b46895",
                     status: "affected",
                     version: "9e90e58c11b74c2bddac4b2702cf79d36b981278",
                     versionType: "git",
                  },
                  {
                     lessThan: "51c23bd691c0f1fb95b29731c356c6fd69925d17",
                     status: "affected",
                     version: "9e90e58c11b74c2bddac4b2702cf79d36b981278",
                     versionType: "git",
                  },
               ],
            },
            {
               defaultStatus: "affected",
               product: "Linux",
               programFiles: [
                  "drivers/xen/evtchn.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     status: "affected",
                     version: "6.7",
                  },
                  {
                     lessThan: "6.7",
                     status: "unaffected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.6.*",
                     status: "unaffected",
                     version: "6.6.23",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.7.*",
                     status: "unaffected",
                     version: "6.7.11",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.8.*",
                     status: "unaffected",
                     version: "6.8.2",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "*",
                     status: "unaffected",
                     version: "6.9",
                     versionType: "original_commit_for_fix",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/evtchn: avoid WARN() when unbinding an event channel\n\nWhen unbinding a user event channel, the related handler might be\ncalled a last time in case the kernel was built with\nCONFIG_DEBUG_SHIRQ. This might cause a WARN() in the handler.\n\nAvoid that by adding an \"unbinding\" flag to struct user_event which\nwill short circuit the handler.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-19T08:53:44.111Z",
            orgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            shortName: "Linux",
         },
         references: [
            {
               url: "https://git.kernel.org/stable/c/99e425032c6ec13584d3cd33846e0c7307501b47",
            },
            {
               url: "https://git.kernel.org/stable/c/35485dad6e28f9b17884764d4692b1655cb848d0",
            },
            {
               url: "https://git.kernel.org/stable/c/9e2d4b58c1da48a32905802aaeadba7084b46895",
            },
            {
               url: "https://git.kernel.org/stable/c/51c23bd691c0f1fb95b29731c356c6fd69925d17",
            },
         ],
         title: "xen/evtchn: avoid WARN() when unbinding an event channel",
         x_generator: {
            engine: "bippy-5f407fcff5a0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      assignerShortName: "Linux",
      cveId: "CVE-2024-27067",
      datePublished: "2024-05-01T13:04:16.051Z",
      dateReserved: "2024-02-19T14:20:24.216Z",
      dateUpdated: "2024-12-19T08:53:44.111Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-27067\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-01T13:15:50.893\",\"lastModified\":\"2024-11-21T09:03:47.497\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nxen/evtchn: avoid WARN() when unbinding an event channel\\n\\nWhen unbinding a user event channel, the related handler might be\\ncalled a last time in case the kernel was built with\\nCONFIG_DEBUG_SHIRQ. This might cause a WARN() in the handler.\\n\\nAvoid that by adding an \\\"unbinding\\\" flag to struct user_event which\\nwill short circuit the handler.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvió la siguiente vulnerabilidad: xen/evtchn: evite WARN() al desvincular un canal de eventos Al desvincular un canal de eventos de usuario, es posible que se llame al controlador relacionado por última vez en caso de que el kernel se haya compilado con CONFIG_DEBUG_SHIRQ. Esto podría provocar un WARN() en el controlador. Evite esto agregando un indicador de \\\"desvinculación\\\" a la estructura user_event que provocará un cortocircuito en el controlador.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/35485dad6e28f9b17884764d4692b1655cb848d0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/51c23bd691c0f1fb95b29731c356c6fd69925d17\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/99e425032c6ec13584d3cd33846e0c7307501b47\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9e2d4b58c1da48a32905802aaeadba7084b46895\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/35485dad6e28f9b17884764d4692b1655cb848d0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/51c23bd691c0f1fb95b29731c356c6fd69925d17\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/99e425032c6ec13584d3cd33846e0c7307501b47\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/9e2d4b58c1da48a32905802aaeadba7084b46895\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/99e425032c6ec13584d3cd33846e0c7307501b47\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/35485dad6e28f9b17884764d4692b1655cb848d0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/9e2d4b58c1da48a32905802aaeadba7084b46895\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/51c23bd691c0f1fb95b29731c356c6fd69925d17\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:27:57.836Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-27067\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-17T17:40:05.117300Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-17T17:40:06.210Z\"}}], \"cna\": {\"title\": \"xen/evtchn: avoid WARN() when unbinding an event channel\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"3c8f5965a99397368d3762a9814a21a3e442e1a4\", \"lessThan\": \"99e425032c6ec13584d3cd33846e0c7307501b47\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9e90e58c11b74c2bddac4b2702cf79d36b981278\", \"lessThan\": \"35485dad6e28f9b17884764d4692b1655cb848d0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9e90e58c11b74c2bddac4b2702cf79d36b981278\", \"lessThan\": \"9e2d4b58c1da48a32905802aaeadba7084b46895\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9e90e58c11b74c2bddac4b2702cf79d36b981278\", \"lessThan\": \"51c23bd691c0f1fb95b29731c356c6fd69925d17\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/xen/evtchn.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.7\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.7\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.6.23\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/xen/evtchn.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/99e425032c6ec13584d3cd33846e0c7307501b47\"}, {\"url\": \"https://git.kernel.org/stable/c/35485dad6e28f9b17884764d4692b1655cb848d0\"}, {\"url\": \"https://git.kernel.org/stable/c/9e2d4b58c1da48a32905802aaeadba7084b46895\"}, {\"url\": \"https://git.kernel.org/stable/c/51c23bd691c0f1fb95b29731c356c6fd69925d17\"}], \"x_generator\": {\"engine\": \"bippy-5f407fcff5a0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nxen/evtchn: avoid WARN() when unbinding an event channel\\n\\nWhen unbinding a user event channel, the related handler might be\\ncalled a last time in case the kernel was built with\\nCONFIG_DEBUG_SHIRQ. This might cause a WARN() in the handler.\\n\\nAvoid that by adding an \\\"unbinding\\\" flag to struct user_event which\\nwill short circuit the handler.\"}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2024-12-19T08:53:44.111Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-27067\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-19T08:53:44.111Z\", \"dateReserved\": \"2024-02-19T14:20:24.216Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-01T13:04:16.051Z\", \"assignerShortName\": \"Linux\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.