CVE-2024-53240
published 2024-12-24CVE-2024-53240: In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after…
PriorityP422medium5.7CVSS 3.1
AVAACLPRLUINSUCNINAH
EPSS
0.62%
46.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
xen/netfront: fix crash when removing device
When removing a netfront device directly after a suspend/resume cycle
it might happen that the queues have not been setup again, causing a
crash during the attempt to stop the queues another time.
Fix that by checking the queues are existing before trying to stop
them.
This is XSA-465 / CVE-2024-53240.
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.123-1 (bookworm) | linux 6.1.123-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.123-1 (bookworm) | linux 6.1.123-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 4.19.269 < 4.20 | 4.20 |
| linux | linux | >= 5.10.159 < 5.10.232 | 5.10.232 |
| linux | linux | >= 5.15.83 < 5.15.175 | 5.15.175 |
| linux | linux | >= 5.4.227 < 5.4.288 | 5.4.288 |
| linux | linux | >= 6.0.13 < 6.1 | 6.1 |
| linux | linux | >= d50b7914fae04d840ce36491d22133070b18cca9 < 8b41e6bccf7de93982781be4125211443382e66d | 8b41e6bccf7de93982781be4125211443382e66d |
| linux | linux | >= d50b7914fae04d840ce36491d22133070b18cca9 < fe9a8f5250aed0948b668c8a4e051e3b0fc29f09 | fe9a8f5250aed0948b668c8a4e051e3b0fc29f09 |
| linux | linux | >= d50b7914fae04d840ce36491d22133070b18cca9 < 7728e974ffbf14f17648dd92ea640b42b654d47c | 7728e974ffbf14f17648dd92ea640b42b654d47c |
| linux | linux | >= d50b7914fae04d840ce36491d22133070b18cca9 < f9244fb55f37356f75c739c57323d9422d7aa0f8 | f9244fb55f37356f75c739c57323d9422d7aa0f8 |
| linux | linux | >= e6860c889f4ad50b6ab696f5ea154295d72cf27a < 1d5354a9182b6d302ae10367cbec1ca339d4e4e7 | 1d5354a9182b6d302ae10367cbec1ca339d4e4e7 |
| linux | linux | >= e6e897d4fe2f89c0bd94600a40bedf5e6e75e050 < 2657ba851fa3381256d81e431b20041dc232fd88 | 2657ba851fa3381256d81e431b20041dc232fd88 |
| linux | linux | >= ed773dd798bf720756d20021b8d8a4a3d7184bda < 20f7f0cf7af5d81b218202ef504223af84b16a8f | 20f7f0cf7af5d81b218202ef504223af84b16a8f |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.234-1 | 5.10.234-1 |
| linux | linux_kernel | >= 0 < 6.1.123-1 | 6.1.123-1 |
| linux | linux_kernel | >= 0 < 6.12.6-1 | 6.12.6-1 |
| linux | linux_kernel | >= 0 < 6.12.6-1 | 6.12.6-1 |
| linux | linux_kernel | >= 4.19.269 < 4.20 | 4.20 |
| linux | linux_kernel | >= 5.10.159 < 5.10.232 | 5.10.232 |
CVSS provenance
nvdv3.15.7MEDIUMCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.7MEDIUM
vendor_debian5.7MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens Third-Party Components in SINEC OS
cisa_ics·2025-08-14
Siemens Third-Party Components in SINEC OS
ICS Advisory
##
Siemens Third-Party Components in SINEC OS
Release DateAugust 14, 2025
Alert CodeICSA-25-226-07
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: Third-Party Components in SINEC OS
- Vulnerabilities: Improper Input Validation, Use After Free, Out-of-bounds Read,
Red Hat
kernel: xen: netfront: Backend can crash Linux netfront (Xen Security Advisory 465)
vendor_redhat·2024-12-17·CVSS 5.5
CVE-2024-53240 [MEDIUM] CWE-476 kernel: xen: netfront: Backend can crash Linux netfront (Xen Security Advisory 465)
kernel: xen: netfront: Backend can crash Linux netfront (Xen Security Advisory 465)
In the Linux kernel, the following vulnerability has been resolved:
xen/netfront: fix crash when removing device
When removing a netfront device directly after a suspend/resume cycle
it might happen that the queues have not been setup again, causing a
crash during the attempt to stop the queues another time.
Fix that by checking the queues are existing before trying to stop
them.
This is XSA-465 / CVE-2024-53240.
Statement: Only systems with non-trusted network backends are vulnerable.
As far as known only Linux guests with the fix for CVE-2022-48969 applied
are vulnerable (this includes all kernel versions from 6.1 onwards)
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: ke
Debian
CVE-2024-53240: linux - In the Linux kernel, the following vulnerability has been resolved: xen/netfron...
vendor_debian·2024·CVSS 5.7
CVE-2024-53240 [MEDIUM] CVE-2024-53240: linux - In the Linux kernel, the following vulnerability has been resolved: xen/netfron...
In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240.
Scope: local
bookworm: resolved (fixed in 6.1.123-1)
bullseye: resolved (fixed in 5.10.234-1)
forky: resolved (fixed in 6.12.6-1)
sid: resolved (fixed in 6.12.6-1)
trixie: resolved (fixed in 6.12.6-1)
GHSA
GHSA-prjx-w4x5-gf5v: In the Linux kernel, the following vulnerability has been resolved:
xen/netfront: fix crash when removing device
When removing a netfront device dir
ghsa_unreviewed·2024-12-24·CVSS 5.7
CVE-2024-53240 [MEDIUM] GHSA-prjx-w4x5-gf5v: In the Linux kernel, the following vulnerability has been resolved:
xen/netfront: fix crash when removing device
When removing a netfront device dir
In the Linux kernel, the following vulnerability has been resolved:
xen/netfront: fix crash when removing device
When removing a netfront device directly after a suspend/resume cycle
it might happen that the queues have not been setup again, causing a
crash during the attempt to stop the queues another time.
Fix that by checking the queues are existing before trying to stop
them.
This is XSA-465 / CVE-2024-53240.
OSV
CVE-2024-53240: In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device direc
osv·2024-12-24·CVSS 5.7
CVE-2024-53240 [MEDIUM] CVE-2024-53240: In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device direc
In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240.
Kernel
xen/netfront: fix crash when removing device
kernel_security·2024-11-07·CVSS 5.7
CVE-2024-53240 [MEDIUM] xen/netfront: fix crash when removing device
xen/netfront: fix crash when removing device
When removing a netfront device directly after a suspend/resume cycle
it might happen that the queues have not been setup again, causing a
crash during the attempt to stop the queues another time.
Fix that by checking the queues are existing before trying to stop
them.
This is XSA-465 / CVE-2024-53240.
Reported-by: Marek Marczykowski-Górecki
Fixes: d50b7914fae0 ("xen-netfront: Fix NULL sring after live migration")
Signed-off-by: Juergen Gross
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/1d5354a9182b6d302ae10367cbec1ca339d4e4e7https://git.kernel.org/stable/c/20f7f0cf7af5d81b218202ef504223af84b16a8fhttps://git.kernel.org/stable/c/2657ba851fa3381256d81e431b20041dc232fd88https://git.kernel.org/stable/c/7728e974ffbf14f17648dd92ea640b42b654d47chttps://git.kernel.org/stable/c/8b41e6bccf7de93982781be4125211443382e66dhttps://git.kernel.org/stable/c/f9244fb55f37356f75c739c57323d9422d7aa0f8https://git.kernel.org/stable/c/fe9a8f5250aed0948b668c8a4e051e3b0fc29f09http://xenbits.xen.org/xsa/advisory-465.htmlhttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.htmlhttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
2024-12-24
Published