CVE-2024-53240

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

xen/netfront: fix crash when removing device

When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time.

Fix that by checking the queues are existing before trying to stop them.

This is XSA-465 / CVE-2024-53240.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Linux	Linux	>= ed773dd798bf720756d20021b8d8a4a3d7184bda, < 20f7f0cf7af5d81b218202ef504223af84b16a8f; >= e6860c889f4ad50b6ab696f5ea154295d72cf27a, < 1d5354a9182b6d302ae10367cbec1ca339d4e4e7; >= e6e897d4fe2f89c0bd94600a40bedf5e6e75e050, < 2657ba851fa3381256d81e431b20041dc232fd88; >= d50b7914fae04d840ce36491d22133070b18cca9, < 8b41e6bccf7de93982781be4125211443382e66d; >= d50b7914fae04d840ce36491d22133070b18cca9, < fe9a8f5250aed0948b668c8a4e051e3b0fc29f09; >= d50b7914fae04d840ce36491d22133070b18cca9, < 7728e974ffbf14f17648dd92ea640b42b654d47c; >= d50b7914fae04d840ce36491d22133070b18cca9, < f9244fb55f37356f75c739c57323d9422d7aa0f8; 99859947517e446058ad7243ee81d2f9801fa3dd; f2dd60fd3fe98bd36a91b0c6e10bfe9d66258f84; >= 5.4.227, < 5.4.288; >= 5.10.159, < 5.10.232; >= 5.15.83, < 5.15.175; >= 4.19.269, < 4.20; >= 6.0.13, < 6.1
Linux	Linux	6.1

References

Timeline

Published: Dec 24, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-532415.5In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of CVE-2024-532427.8A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versi CVE-2024-532434.3In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure Gateway app o CVE-2024-532445.7In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.2.2406.107, 9.2.2403.109, and 9.1.231 CVE-2024-532454.3In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user tha CVE-2024-532467.5In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.11 CVE-2024-532478.8In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, and versions below 3.4.261 and 3.7.13 of the Splunk Secure Gateway app on Splun CVE-2024-53256.5The Form Vibes plugin for WordPress is vulnerable to SQL Injection via the ‘fv_export_data’ parameter in all versions up to, and including, CVE-2024-532535.3Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario wher CVE-2024-532555.4BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In CVE-2024-532567.8Rizin is a UNIX-like reverse engineering framework and command-line toolset. `rizin.c` still had an old snippet of code which suffered a com CVE-2024-532574.9Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do