CVE-2024-46762

A flaw was found in the Linux kernel's xen: privcmd component. This use-after-free vulnerability occurs due to a race condition between simultaneous ioctl calls to privcmd_irqfd_assign() and privcmd_irqfd_deassign(). A local attacker could exploit this by causing a kirqfd instance to be freed while still in use, which leads to a kernel oops and a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, if Xen virtualization is not in use, prevent the xen_privcmd kernel module from loading. This can be achieved by creating a blacklist rule.

Create a file named /etc/modprobe.d/blacklist-xen_privcmd.conf with the following content: blacklist xen_privcmd

Then, regenerate the initramfs: dracut -f -v (for RHEL 7/8/9)

A system reboot is required for the changes to take effect. This mitigation may impact systems relying on Xen virtualization.