{"id":"CVE-2024-39292","revision":"20c3d91542354b7a851bdda243c893f3","records":[{"revision":"20c3d91542354b7a851bdda243c893f3","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-39292","aliases":[],"title":"um: Add winch to winch_handlers before registering winch IRQ","description":"In the Linux kernel, the following vulnerability has been resolved:\n\num: Add winch to winch_handlers before registering winch IRQ\n\nRegistering a winch IRQ is racy, an interrupt may occur before the winch is\nadded to the winch_handlers list.\n\nIf that happens, register_winch_irq() adds to that list a winch that is\nscheduled to be (or has already been) freed, causing a panic later in\nwinch_cleanup().\n\nAvoid the race by adding the winch to the winch_handlers list before\nregistering the IRQ, and rolling back if um_request_irq() fails.","state":0,"publishedAt":"2024-06-24T13:52:26.769+00:00","modifiedAt":"2026-10-15T00:43:56.312+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/um/drivers/line.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"42a359e31a0e438b5b978a8f0fecdbd3c86bb033\",\n                            \"lessThan\": \"66ea9a7c6824821476914bed21a476cd20094f33\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"42a359e31a0e438b5b978a8f0fecdbd3c86bb033\",\n                            \"lessThan\": \"dc1ff95602ee908fcd7d8acee7a0dadb61b1a0c0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"42a359e31a0e438b5b978a8f0fecdbd3c86bb033\",\n                            \"lessThan\": \"351d1a64544944b44732f6a64ed65573b00b9e14\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"42a359e31a0e438b5b978a8f0fecdbd3c86bb033\",\n                            \"lessThan\": \"31960d991e43c8d6dc07245f19fc13398e90ead2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"42a359e31a0e438b5b978a8f0fecdbd3c86bb033\",\n                            \"lessThan\": \"0c02d425a2fbe52643a5859a779db0329e7dddd4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"42a359e31a0e438b5b978a8f0fecdbd3c86bb033\",\n                            \"lessThan\": \"434a06c38ee1217a8baa0dd7c37cc85d50138fb0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"42a359e31a0e438b5b978a8f0fecdbd3c86bb033\",\n                            \"lessThan\": \"73b8e21f76c7dda4905655d2e2c17dc5a73b87f1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"42a359e31a0e438b5b978a8f0fecdbd3c86bb033\",\n                            \"lessThan\": \"a0fbbd36c156b9f7b2276871d499c9943dfe5101\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/um/drivers/line.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.23\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.23\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.316\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.278\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.219\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.161\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.93\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.33\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.9.4\",\n                            \"lessThanOrEqual\": \"6.9.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/66ea9a7c6824821476914bed21a476cd20094f33","https://git.kernel.org/stable/c/dc1ff95602ee908fcd7d8acee7a0dadb61b1a0c0","https://git.kernel.org/stable/c/351d1a64544944b44732f6a64ed65573b00b9e14","https://git.kernel.org/stable/c/31960d991e43c8d6dc07245f19fc13398e90ead2","https://git.kernel.org/stable/c/0c02d425a2fbe52643a5859a779db0329e7dddd4","https://git.kernel.org/stable/c/434a06c38ee1217a8baa0dd7c37cc85d50138fb0","https://git.kernel.org/stable/c/73b8e21f76c7dda4905655d2e2c17dc5a73b87f1","https://git.kernel.org/stable/c/a0fbbd36c156b9f7b2276871d499c9943dfe5101"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-39292","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-39292","identifiers":["CVE-2024-39292"]},"retained":false,"historicalAffected":[]}],"coverage":[]}