CVE-2024-38580

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the epoll component in the Linux kernel, where a file pointer may race with the last 'fput()' call, causing the file reference count to go down to zero. This results in the file pointer being dead, and any use of it won't actually get a reference to the file. The problem occurs when epoll calls out to vfs poll() with a file pointer that may be torn down due to a racing condition. To fix this, a valid reference on the file pointer is ensured before calling down to vfs poll() from the epoll routines.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.