CVE-2024-39292

Summary

CVE-2024-39292 is a vulnerability affecting the Linux kernel. This issue involves the winch subsystem where registering a winch IRQ before adding it to the winch_handlers list can result in a panic. The race condition arises due to the interruption occurring before the winch is added to the list. To mitigate this, the patch adds the winch to the winch_handlers list prior to registering the IRQ, and rolls back if the registration fails to ensure the winch is valid before use.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.