CVE-2024-27030

Katalog CVE

CVSS 6.3 · Medium EPSS 0,23%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, debian linux. Skor CVSS 3.1 6.3 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF to AF vector same interrupt handler is registered which is causing race condition. When two interrupts are raised to two CPUs at same time then two cores serve same event corrupting the data.

Rincian

Terbit di NVD

1 Mei 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

6.3 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/29d2550d79a8cbd31e0fbaa5c0e2a2efdc444e44 patch
• https://git.kernel.org/stable/c/4fedae8f9eafa2ac8cdaca58e315f52a7e2a8701 patch
• https://git.kernel.org/stable/c/50e60de381c342008c0956fd762e1c26408f372c patch
• https://git.kernel.org/stable/c/766c2627acb2d9d1722cce2e24837044d52d888a patch
• https://git.kernel.org/stable/c/772f18ded0e240cc1fa2b7020cc640e3e5c32b70 patch
• https://git.kernel.org/stable/c/94cb17e5cf3a3c484063abc0ce4b8a2b2e8c1cb2 patch
• https://git.kernel.org/stable/c/ad6759e233db6fcc131055f8e23b4eafbe81053c patch
• https://git.kernel.org/stable/c/dc29dd00705a62c77de75b6d752259b869aac49d patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list · advisory pihak ketiga