CVE-2024-27067: linux
Vulnerability summary
CVE-2024-27067 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 12 · Related 12Timeline
- 01-05-2024PublishedVulnerability first disclosed.
- 23-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN() when unbinding an event channel When unbinding a user event channel, the related handler might be called a last time in case the kernel was built with CONFIG_DEBUG_SHIRQ. This might cause a WARN() in the handler. Avoid that by adding an "unbinding" flag to struct user_event which will short circuit the handler.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
0.00 pp
From 0.22% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu72 products
- linux< 6.8.0-35.35
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 3c8f5965a99397368d3762a9814a21a3e442e1a4, < 99e425032c6ec13584d3cd33846e0c7307501b47 | ≥ 9e90e58c11b74c2bddac4b2702cf79d36b981278, < 35485dad6e28f9b17884764d4692b1655cb848d0 | ≥ 9e90e58c11b74c2bddac4b2702cf79d36b981278, < 9e2d4b58c1da48a32905802aaeadba7084b46895 | ≥ 9e90e58c11b74c2bddac4b2702cf79d36b981278, < 51c23bd691c0f1fb95b29731c356c6fd69925d17 | ≥ 6.6.19, < 6.6.23 | 6.7
- linux_kernel≥ 6.6.19, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2
Debian1 product
- linux< 6.7.12-1
3 vendors · 75 products
