CVE-2024-45007

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-45007
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Don't destroy workqueue from work item running on it Triggered by a kref decrement, destroy_workqueue() may be called from within a work item for destroying its own workqueue. This illegal situation is averted by adding a module-global workqueue for exclusive use of the offending work item. Other work items continue to be queued on per-device workqueues to ensure performance.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/409b495f8e3300d5fba08bc817fa8825dae48cc9 Patch
https://git.kernel.org/stable/c/5d3567caff2a1d678aa40cc74a54e1318941fad3 Patch
https://git.kernel.org/stable/c/a7ad105b12256ec7fb6d6d1a0e2e60f00b7da157 Patch
https://git.kernel.org/stable/c/aa1a19724fa2c31e97a9be48baedd4692b265157 Patch
https://git.kernel.org/stable/c/ccbde4b128ef9c73d14d0d7817d68ef795f6d131 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
History

09 Oct 2025, 18:11

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/409b495f8e3300d5fba08bc817fa8825dae48cc9 - () https://git.kernel.org/stable/c/409b495f8e3300d5fba08bc817fa8825dae48cc9 - Patch
References () https://git.kernel.org/stable/c/5d3567caff2a1d678aa40cc74a54e1318941fad3 - () https://git.kernel.org/stable/c/5d3567caff2a1d678aa40cc74a54e1318941fad3 - Patch
References () https://git.kernel.org/stable/c/a7ad105b12256ec7fb6d6d1a0e2e60f00b7da157 - () https://git.kernel.org/stable/c/a7ad105b12256ec7fb6d6d1a0e2e60f00b7da157 - Patch
References () https://git.kernel.org/stable/c/aa1a19724fa2c31e97a9be48baedd4692b265157 - () https://git.kernel.org/stable/c/aa1a19724fa2c31e97a9be48baedd4692b265157 - Patch
References () https://git.kernel.org/stable/c/ccbde4b128ef9c73d14d0d7817d68ef795f6d131 - () https://git.kernel.org/stable/c/ccbde4b128ef9c73d14d0d7817d68ef795f6d131 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

05 Sep 2024, 12:53

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: char: xillybus: No destruya la cola de trabajo del elemento de trabajo que se ejecuta en ella. Desencadenado por una disminución de kref, destroy_workqueue() puede llamarse desde dentro de un elemento de trabajo para destruir su propia cola de trabajo. Esta situación ilegal se evita añadiendo una cola de trabajo global del módulo para uso exclusivo del elemento de trabajo infractor. Otros elementos de trabajo continúan en colas de trabajo por dispositivo para garantizar el rendimiento.

04 Sep 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-04 20:15

Updated : 2025-10-09 18:11

NVD link : CVE-2024-45007

Mitre link : CVE-2024-45007

CVE.ORG link : CVE-2024-45007

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo