SECUFOCUSNOW
Home›CVE index›CVE-2024-56704
Review reviewHigh

CVE-2024-56704

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. [Dominique: remove confusing variable reset to 0]

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.12.28
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. [Dominique: remove confusing variable reset to 0]

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < 692eb06703afc3e24d889d77e94a0e20229f6a4a, >= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < d74b4b297097bd361b8a9abfde9b521ff464ea9c, >= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < 7f5a2ed5c1810661e6b03f5a4ebf17682cdea850, >= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < 4950408793b118cb8075bcee1f033b543fb719fa, >= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < b9e26059664bd9ebc64a0e8f5216266fc9f84265, >= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < 2bb3ee1bf237557daea1d58007d2e1d4a6502ccf, >= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < d888f5f5d76b2722c267e6bdf51d445d60647b7b, >= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < 530bc9f03a102fac95b07cda513bfc16ff69e0ee, >= 71ebd71921e451f0f942ddfe85d01e31ddc6eb88 < e43c608f40c065b30964f0a806348062991b802d, >= 4.12, >= 4.12 < 4.19.325, >= 4.20 < 5.4.287, >= 5.5 < 5.10.231, >= 5.11 < 5.15.174, >= 5.16 < 6.1.120, >= 6.2 < 6.6.64, >= 6.7 < 6.11.11, >= 6.12 < 6.12.2
Fixed versions
4.19.325, 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.64, 6.11.11, 6.12.2

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-415
CVE-2024-56704 — Linux Linux, linux kernel | SECUFOCUS NOW