01 Record

CVE-2024-53240

xen/netfront: fix crash when removing device

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

xen/netfront: fix crash when removing device

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.62% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 49.4% of scored records. A rank, not a probability.
NVD base score: 5.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-12-24 09:22Z1 YR AGO

Last updated

2026-05-23 15:55Z5 MO AGO

Reserved

2024-11-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

67466295bd4075980484c3be8ab358a9f81e102adaa024af5ce6760288c6dcb6

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxed773dd798bf720756d20021b8d8a4a3d7184bda to < 20f7f0cf7af5d81b218202ef504223af84b16a8f, e6860c889f4ad50b6ab696f5ea154295d72cf27a to < 1d5354a9182b6d302ae10367cbec1ca339d4e4e7, e6e897d4fe2f89c0bd94600a40bedf5e6e75e050 to < 2657ba851fa3381256d81e431b20041dc232fd88, d50b7914fae04d840ce36491d22133070b18cca9 to < 8b41e6bccf7de93982781be4125211443382e66d, d50b7914fae04d840ce36491d22133070b18cca9 to < fe9a8f5250aed0948b668c8a4e051e3b0fc29f09, d50b7914fae04d840ce36491d22133070b18cca9 to < 7728e974ffbf14f17648dd92ea640b42b654d47c, d50b7914fae04d840ce36491d22133070b18cca9 to < f9244fb55f37356f75c739c57323d9422d7aa0f8, 99859947517e446058ad7243ee81d2f9801fa3dd, f2dd60fd3fe98bd36a91b0c6e10bfe9d66258f84, 5.4.227 to < 5.4.288, 5.10.159 to < 5.10.232, 5.15.83 to < 5.15.175, 4.19.269 to < 4.20, 6.0.13 to < 6.1, 6.1—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/20f7f0cf7af5d81b218202ef504223af84b16a8f
git.kernel.orghttps://git.kernel.org/stable/c/1d5354a9182b6d302ae10367cbec1ca339d4e4e7
git.kernel.orghttps://git.kernel.org/stable/c/2657ba851fa3381256d81e431b20041dc232fd88
git.kernel.orghttps://git.kernel.org/stable/c/8b41e6bccf7de93982781be4125211443382e66d
git.kernel.orghttps://git.kernel.org/stable/c/fe9a8f5250aed0948b668c8a4e051e3b0fc29f09
git.kernel.orghttps://git.kernel.org/stable/c/7728e974ffbf14f17648dd92ea640b42b654d47c
git.kernel.orghttps://git.kernel.org/stable/c/f9244fb55f37356f75c739c57323d9422d7aa0f8
xenbits.xen.orghttp://xenbits.xen.org/xsa/advisory-465.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.123-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.