Vulnerability in Linux
CVE-2024-42135
In the Linux kernel, the following vulnerability has been resolved: vhost_task: Handle SIGKILL by flushing work and exiting Instead of lingering until the device is closed, this has us handle SIGKILL by: 1. marking the worker as killed so we no longer try to use it with new virtqueues and new flush operations. 2. setting the virtqueue to worker mapping so no new works are queued. 3. running all the exiting works.
EPSS: 0.002 (13.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions f9010dbdce911ee1f1af1398a24b1f9f992e0080, 6.4, 0
- Linux Linux_kernel
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-42135?
- CVE-2024-42135 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-07-30.
- How severe is CVE-2024-42135?
- Medium severity. CVSS v3 base score is 5.5 out of 10.
- Is CVE-2024-42135 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.