CVE-2024-0639

Katalog CVE

CVSS 5.5 · Medium EPSS 0,18%

Kerentanan Deadlock pada linux kernel, redhat enterprise linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

Rincian

Terbit di NVD

17 Januari 2024

Terakhir diubah

21 Juli 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-833: Deadlock
CWE-667: Improper Locking

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2258754 issue tracking · patch
• https://github.com/torvalds/linux/commit/6feb37b3b06e9049e20dcf7e23998f92c9c5be9a patch
• https://access.redhat.com/security/cve/CVE-2024-0639 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:6583