PT-2024-27497

CVE-2024-37353

·

Published

2024-06-21

·

Updated

2026-10-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37
Description A vulnerability in the Linux kernel has been resolved. The issue occurs when request irq() fails, causing an error path that calls vp del vqs(), which attempts to free an already freed IRQ, resulting in a warning. The vulnerability is related to the virtio module and the vp find vqs msix() function.
Recommendations For Linux kernel versions prior to 6.6.37, update to version 6.6.37 or later to resolve the issue.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
ALSA-2024:5363
DLA-3840-1
DSA-5730-1
INFSA-2024_5363
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-1793
OESA-2024-1836
OESA-2024-1838
OESA-2024-1839
OPENSUSE-SU-2024_3587-1
OPENSUSE-SU-2024_3592-1
RHSA-2024:5363
RHSA-2024_5363
RLSA-2024:5363
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2973-1
SUSE-SU-2024:3569-1
SUSE-SU-2024:3587-1
SUSE-SU-2024:3592-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6951-1
USN-6951-2
USN-6951-3
USN-6951-4
USN-6953-1
USN-6979-1
Found an issue in the description? Have something to add? Feel free to write us 👾