CVE-2024-56704
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 28, 2024
Updated: Jan 13, 2025
CWE ID 415
Summary
CVE-2024-56704 is a newly identified vulnerability in the Linux kernel. This issue involves a double-free IRQ event in the 9p/xen subsystem. Kernel logs indicate that an IRQ was inadvertently released twice. To mitigate this issue, it is crucial to ensure the correct device ID is provided during IRQ release. A variable reset, which was previously considered confusing, has been removed from the code to improve security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.