CVE-2024-44957

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to a deadlock that occurs when irqfd wakeup() gets EPOLLHUP and is called by eventfd release() through wake up poll(&ctx->wqh, EPOLLHUP), which is called under spin lock irqsave(). This happens because a mutex cannot be used in this context, as it would lead to a deadlock. The fix involves switching from a mutex to a spinlock for irqfds. The vulnerability can be exploited through a local network attack vector.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider restricting access to the vulnerable irqfd wakeup() function until a patch is available.