CVE-2024-27419CWE-362

CVE-2024-27419

Medium · published May 17, 2024

CVSS v3.1
4.7
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netrom: Fix data-races around sysctl_net_busy_read

We need to protect the reader reading the sysctl value because the

value can be changed concurrently.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-05-17T16:15Z
Affected products (20)
ProductVersionsFixed in
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernel≥ 2.6.13, < 4.19.3104.19.310
linux/linux_kernel≥ 4.20, < 5.4.2725.4.272
linux/linux_kernel≥ 5.5, < 5.10.2135.10.213
linux/linux_kernel≥ 5.11, < 5.15.1525.15.152
linux/linux_kernel≥ 5.16, < 6.1.826.1.82
linux/linux_kernel≥ 6.2, < 6.6.226.6.22
linux/linux_kernel≥ 6.7, < 6.7.106.7.10
debian/debian_linuxall versions—
References (19)
https://git.kernel.org/stable/c/0866afaff19d8460308b022345ed116a12b1d0e1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/16d71319e29d5825ab53f263b59fdd8dc2d60ad4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/34cab94f7473e7b09f5205d4583fb5096cb63b5b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/43464808669ba9d23996f0b6d875450191687caf · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d380ce70058a4ccddc3e5f5c2063165dc07672c6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d623fd5298d95b65d27ef5a618ebf39541074856 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f9055fa2b2931261d5f89948ee5bc315b6a22d4a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0866afaff19d8460308b022345ed116a12b1d0e1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/16d71319e29d5825ab53f263b59fdd8dc2d60ad4 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/34cab94f7473e7b09f5205d4583fb5096cb63b5b · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/43464808669ba9d23996f0b6d875450191687caf · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d380ce70058a4ccddc3e5f5c2063165dc07672c6 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d623fd5298d95b65d27ef5a618ebf39541074856 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f9055fa2b2931261d5f89948ee5bc315b6a22d4a · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 17 MAY 12:01Z
    netrom: Fix data-races around sysctl_net_busy_read
    cvelistv5