CVE-2024-27404CWE-362

CVE-2024-27404

High · published May 17, 2024

CVSS v3.1
8.2
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix data races on remote_id

Similar to the previous patch, address the data race on

remote_id, adding the suitable ONCE annotations.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00416 · 34.8th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-05-17T16:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.0, < 6.1.816.1.81
linux/linux_kernel≥ 6.2, < 6.6.196.6.19
linux/linux_kernel≥ 6.7, < 6.7.76.7.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
https://git.kernel.org/stable/c/2dba5774e8ed326a78ad4339d921a4291281ea6e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/967d3c27127e71a10ff5c083583a038606431b61 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/987c3ed7297e5661bc7f448f06fc366e497ac9b2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e64148635509bf13eea851986f5a0b150e5bd066 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2dba5774e8ed326a78ad4339d921a4291281ea6e · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/967d3c27127e71a10ff5c083583a038606431b61 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/987c3ed7297e5661bc7f448f06fc366e497ac9b2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e64148635509bf13eea851986f5a0b150e5bd066 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 MAY 11:40Z
    mptcp: fix data races on remote_id
    cvelistv5