CVE-2024-42135
vhost_task: Handle SIGKILL by flushing work and exiting
Reported by linux · Published July 30, 2024
In the Linux kernel, the following vulnerability has been resolved: vhost_task: Handle SIGKILL by flushing work and exiting Instead of lingering until the device is closed, this has us handle SIGKILL by: 1. marking the worker as killed so we no longer try to use it with new virtqueues and new flush operations. 2. setting the virtqueue to worker mapping so no new works are queued. 3. running all the exiting works.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | dec987fe2df670827eb53b97c9552ed8dfc63ad4, db5247d9bf5c6ade9fd70b4e4897441e0269b233, abe067dc3a662eef7d5cddbbc41ed50a0b68b0af |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | f9010dbdce911ee1f1af1398a24b1f9f992e0080, f9010dbdce911ee1f1af1398a24b1f9f992e0080, f9010dbdce911ee1f1af1398a24b1f9f992e0080 |
| Linux | Linux | 6.4, 0, 6.6.39 |
| Linux | Linux | *, 6.6.39, 6.9.9 |
| linux | linux_kernel | 6.4, 6.4, 6.4 |
Timeline
- Jul 29, 2024 CVE Published
- Jul 30, 2024 EPSS Score (30 in total, the first dated here)
- Oct 4, 2024 Coalition ESS Score (9 in total, the first dated here)
- Jan 6, 2026 Security Advisory (348 in total, the first dated here)
- May 4, 2026 Distribution Patch (230 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-42135
vulnetix vdb fixes CVE-2024-42135Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-42135/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart