CVE-2024-27394CWE-416

CVE-2024-27394

High · published May 14, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix Use-After-Free in tcp_ao_connect_init

Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal

of tcp_ao_connect_init, is not part of the RCU read critical section, it

is possible that the RCU grace period will pass during the traversal and

the key will be free.

To prevent this, it should be changed to hlist_for_each_entry_safe.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.8th percentile
Weakness
CWE-416 · Use After Free
Published
2024-05-14T19:12Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 6.7, < 6.8.96.8.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 09 MAY 16:37Z
    tcp: Fix Use-After-Free in tcp_ao_connect_init
    cvelistv5