cve/2024/CVE-2024-39292.md

### [CVE-2024-39292](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39292)
![](https://img.shields.io/static/v1?label=Product&message=Linux&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=2.6.23%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=42a359e31a0e438b5b978a8f0fecdbd3c86bb033%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=blue)

### Description

In the Linux kernel, the following vulnerability has been resolved:um: Add winch to winch_handlers before registering winch IRQRegistering a winch IRQ is racy, an interrupt may occur before the winch isadded to the winch_handlers list.If that happens, register_winch_irq() adds to that list a winch that isscheduled to be (or has already been) freed, causing a panic later inwinch_cleanup().Avoid the race by adding the winch to the winch_handlers list beforeregistering the IRQ, and rolling back if um_request_irq() fails.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds