CVE-2024-37353

Updated: 2024-11-30 03:19:25.110539

Description:

[REJECTED CVE] A resource management issue exists in the Linux Kernel's virtio module. When request_irq() fails in vp_find_vqs_msix(), the cleanup path incorrectly attempts to free an already released IRQ, resulting in warnings and potential system instability. This issue arises from the mishandling of virtual queue deletion during error handling.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x NONE 0
CVSS Version 3.x MEDIUM 4.4

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 4.4 MEDIUM Released CLSA-2025:1743193221 2024-09-02 17:23:35
CentOS 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-15 12:08:46
CentOS 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-08-15 12:08:45
CentOS 8.4 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-15 12:08:45
CentOS 8.5 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-15 12:08:45
CentOS Stream 8 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-15 12:08:45
CloudLinux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-15 12:08:46
CloudLinux 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-08-15 12:08:45
Oracle Linux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-15 12:08:45
Ubuntu 16.04 ELS linux 4.4.0 4.4 MEDIUM Not Vulnerable 2024-08-13 12:17:24
Total: 12