CVE-2024-27419

Katalog CVE

CVSS 4.7 · Medium EPSS 0,19%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, debian linux. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading the sysctl value because the value can be changed concurrently.

Rincian

Terbit di NVD

17 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0866afaff19d8460308b022345ed116a12b1d0e1 patch
• https://git.kernel.org/stable/c/16d71319e29d5825ab53f263b59fdd8dc2d60ad4 patch
• https://git.kernel.org/stable/c/34cab94f7473e7b09f5205d4583fb5096cb63b5b patch
• https://git.kernel.org/stable/c/43464808669ba9d23996f0b6d875450191687caf patch
• https://git.kernel.org/stable/c/bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3 patch
• https://git.kernel.org/stable/c/d380ce70058a4ccddc3e5f5c2063165dc07672c6 patch
• https://git.kernel.org/stable/c/d623fd5298d95b65d27ef5a618ebf39541074856 patch
• https://git.kernel.org/stable/c/f9055fa2b2931261d5f89948ee5bc315b6a22d4a patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html