Review reviewHigh

CVE-2024-42112

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt, the shared interrupts are still being handled in the device remove routine, before free IRQs. So isb memory is still read after it is freed. Thus move wx_free_isb_resources() from txgbe_close() to txgbe_remove(). And fix the improper isb free action in txgbe_open() error handling path.

CVSS: 7.8
EPSS: 0.23%
CISA KEV: Not listed
Published: 2024.07.30

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.23%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= aefd013624a10f39b0bfaee8432a235128705380 < efdc3f54299835ddef23bea651c753c4d467010b, >= aefd013624a10f39b0bfaee8432a235128705380 < 935124dd5883b5de68dc5a94f582480a10643dc9, >= ffe8a87463c8bb885c42ed54540d06ed041e76dc, >= 6.8.12 < 6.9, >= 6.9, >= 6.9 < 6.9.9, 6.10
Fixed versions: 6.9, 6.9.9

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-416