CVE-2024-37353

A flaw was found in the Linux kernel's VirtIO driver. This issue may allow a privileged local user or an attacker capable of presenting a faulty virtual hardware device to cause a Denial of Service (DoS) or system instability. When an interrupt request (IRQ)—a hardware signal alerting the processor—fails during device initialization, the driver fails to remove the corresponding virtual queue before invoking cleanup routines. As a result, the error path attempts to release an unassigned interrupt, causing kernel warnings or system termination.

This CVE has been marked as Rejected by the assigning CNA.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.