{"id":"CVE-2024-56762","aliases":["EUVD-2024-53405","GHSA-6wf9-7vfw-cj9r","MGASA-2025-0030","MGASA-2025-0032"],"status":"rejected","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/sqpoll: fix sqpoll...","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-01-06T16:20:41Z","modified":"2026-10-16T14:10:00Z","affected":[{"source":"osv","ecosystem":"Mageia:9","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.74-1.mga9"}]}],"bundled":202},{"source":"osv","ecosystem":"Mageia:9","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.24-64.mga9"}]}],"bundled":202},{"source":"osv","ecosystem":"Mageia:9","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24-70.mga9"}]}],"bundled":202},{"source":"osv","ecosystem":"Mageia:9","package":"dwarves","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29-1.mga9"}]}],"bundled":202},{"source":"osv","ecosystem":"Mageia:9","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.74-1.mga9"}]}],"bundled":202}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56762"},{"url":"https://git.kernel.org/stable/c/6237331361711810d8f2e3fbfe2f7a6f9548f5e0"},{"url":"https://git.kernel.org/stable/c/80120bb4eef7848d5aa3b1a0cd88367cd05fbe03"},{"url":"https://git.kernel.org/stable/c/8e8494c83cf73168118587e9567e4f7e50ce4fd8"},{"url":"https://git.kernel.org/stable/c/e33ac68e5e21ec1292490dfe061e75c0dbdd3bd4"},{"url":"https://github.com/advisories/GHSA-6wf9-7vfw-cj9r"},{"url":"https://advisories.mageia.org/MGASA-2025-0030.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33961","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.66","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.67","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.68","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.69","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.70","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.71","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.72","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.73","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.74","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2025-0032.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33968","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-56762","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","status":"rejected","published":"2025-01-06T16:20:41.843Z","modified":"2025-01-07T08:48:11.848Z","updated_at":"2026-11-02T14:33:57.983942Z"}],"euvd":[{"id":"EUVD-2024-53405","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","status":"published","published":"2025-01-06T16:20:41Z","modified":"2025-01-07T08:48:11Z","updated_at":"2026-11-03T00:04:25.174818Z"}],"ghsa":[{"id":"GHSA-6wf9-7vfw-cj9r","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/sqpoll: fix sqpoll...","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/sqpoll: fix sqpoll error handling races\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x370b/0x4a10 kernel/locking/lockdep.c:5089\nCall Trace:\n\u003cTASK\u003e\n...\n_raw_spin_lock_irqsave+0x3d/0x60 kernel/locking/spinlock.c:162\nclass_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\ntry_to_wake_up+0xb5/0x23c0 kernel/sched/core.c:4205\nio_sq_thread_park+0xac/0xe0 io_uring/sqpoll.c:55\nio_sq_thread_finish+0x6b/0x310 io_uring/sqpoll.c:96\nio_sq_offload_create+0x162/0x11d0 io_uring/sqpoll.c:497\nio_uring_create io_uring/io_uring.c:3724 [inline]\nio_uring_setup+0x1728/0x3230 io_uring/io_uring.c:3806\n...\n\nKun Hu reports that the SQPOLL creating error path has UAF, which\nhappens if io_uring_alloc_task_context() fails and then io_sq_thread()\nmanages to run and complete before the rest of error handling code,\nwhich means io_sq_thread_finish() is looking at already killed task.\n\nNote that this is mostly theoretical, requiring fault injection on\nthe allocation side to trigger in practice.","status":"published","published":"2025-01-06T18:31:04Z","modified":"2025-01-06T18:31:11Z","updated_at":"2026-11-02T14:59:21.962449Z"}],"nvd":[{"id":"CVE-2024-56762","description":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","status":"rejected","published":"2025-01-06T17:15:41.777Z","modified":"2026-10-16T14:10:00.12Z","updated_at":"2026-11-02T14:10:41.489236Z"}],"osv":[{"id":"MGASA-2025-0030","title":"Updated kernel, kmod-virtualbox, kmod-xtables-addons \u0026 dwarves packages fix security vulnerabilities","description":"Upstream kernel version 6.6.74 fixes bugs and vulnerabilities.\nThe kmod-virtualbox and kmod-xtables-addons packages have been\nupdated to work with this new kernel.\nFor information about the vulnerabilities see the links.\n","status":"published","published":"2025-01-31T20:54:03Z","modified":"2026-04-16T04:41:37.04829169Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"MGASA-2025-0032","title":"Updated kernel-linus packages fix security vulnerabilities","description":"Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities.\nFor information about the vulnerabilities see the links.\n","status":"published","published":"2025-01-31T20:54:03Z","modified":"2026-04-16T04:44:17.127966836Z","updated_at":"2026-11-02T15:49:42.684501Z"}]}}