Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — xen: privcmd: Fix possible access to a freed kirqfd instance
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0024 16.0 —
AFFECTED
Product Versions Fixed
Linux f8941e6c4c712948663ec5d7bbb546f1a0f4e3f6 – —
Linux 6.6 – 6.6.51
TIMELINE
Sep 11 Reserved by Linux
Sep 18 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-46762 (Linux). CVSS 7.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
xen: privcmd: Fix possible access to a freed kirqfd instance
Nothing prevents simultaneous ioctl calls to privcmd_irqfd_assign() and
privcmd_irqfd_deassign(). If that happens, it is possible that a kirqfd
created and added to the irqfds_list by privcmd_irqfd_assign() may get
removed by another thread executing privcmd_irqfd_deassign(), while the
former is still using it after dropping the locks.
This can lead to a situation where an already freed kirqfd instance may
be accessed and cause kernel oops.
Use SRCU locking to prevent the same, as is done for the KVM
implementation for irqfds.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| September 11, 2024 | Reserved | Reserved by Linux |
| September 18, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-46762 (Linux). CVSS 7.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | f8941e6c4c712948663ec5d7bbb546f1a0f4e3f6 | — |
| Linux | Linux | — | 6.6 | 6.6.51 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-46762 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.