xen/netfront: fix crash when removing device (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.62 % · percentile 50 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240.
References
- https://git.kernel.org/stable/c/20f7f0cf7af5d81b218202ef504223af84b16a8f
- https://git.kernel.org/stable/c/1d5354a9182b6d302ae10367cbec1ca339d4e4e7
- https://git.kernel.org/stable/c/2657ba851fa3381256d81e431b20041dc232fd88
- https://git.kernel.org/stable/c/8b41e6bccf7de93982781be4125211443382e66d
- https://git.kernel.org/stable/c/fe9a8f5250aed0948b668c8a4e051e3b0fc29f09
- https://git.kernel.org/stable/c/7728e974ffbf14f17648dd92ea640b42b654d47c
- https://git.kernel.org/stable/c/f9244fb55f37356f75c739c57323d9422d7aa0f8
- http://xenbits.xen.org/xsa/advisory-465.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.7 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2024-51912
- GCVE · GCVE-0-2024-53240
CERT-FR advisories
- CERTFR-2026-AVI-0326 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0316 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0677 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0212 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0184 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0088 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0071 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0047 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-1093 — Multiples vulnérabilités dans Xen · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.19.269 < 4.20cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.4.227 < 5.4.288cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.159 < 5.10.232cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.83 < 5.15.175cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.0.13 < 6.1cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.1 < 6.1.121cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.6.67cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.12.6cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ed773dd798bf720756d20021b8d8a4a3d7184bda < 20f7f0cf7af5d81b218202ef504223af84b16a8f ; affected e6860c889f4ad50b6ab696f5ea154295d72cf27a < 1d5354a9182b6d302ae10367cbec1ca339d4e4e7 ; affected e6e897d4fe2f89c0bd94600a40bedf5e6e75e050 < 2657ba851fa3381256d81e431b20041dc232fd88 ; affected d50b7914fae04d840ce36491d22133070b18cca9 < 8b41e6bccf7de93982781be4125211443382e66d ; affected d50b7914fae04d840ce36491d22133070b18cca9 < fe9a8f5250aed0948b668c8a4e051e3b0fc29f09 ; affected d50b7914fae04d840ce36491d22133070b18cca9 < 7728e974ffbf14f17648dd92ea640b42b654d47c |
| Linux · Linux | affected 6.1 ; unaffected 0 < 6.1 ; unaffected 5.4.288 ≤ 5.4.* ; unaffected 5.10.232 ≤ 5.10.* ; unaffected 5.15.175 ≤ 5.15.* ; unaffected 6.1.121 ≤ 6.1.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |