CVE-2024-27404

Katalog CVE

CVSS 4.7 · Medium EPSS 0,42%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remote_id Similar to the previous patch, address the data race on remote_id, adding the suitable ONCE annotations.

Rincian

Terbit di NVD

17 Mei 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/2dba5774e8ed326a78ad4339d921a4291281ea6e patch
• https://git.kernel.org/stable/c/967d3c27127e71a10ff5c083583a038606431b61 patch
• https://git.kernel.org/stable/c/987c3ed7297e5661bc7f448f06fc366e497ac9b2 patch
• https://git.kernel.org/stable/c/e64148635509bf13eea851986f5a0b150e5bd066 patch