CVE-2024-27419

MEDIUM

Linux Kernel Data Race in netrom sysctl_net_busy_read

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading the sysctl value because the value can be changed concurrently.

References (11)

Core 11
Core References

Scores

CVSS v3 4.7
EPSS 0.0001
EPSS Percentile 1.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-362
Status published
Products (29)
debian/debian_linux 10.0
linux/Kernel 2.6.12 - 4.19.310linux
linux/Kernel 4.20.0 - 5.4.272linux
linux/Kernel 5.11.0 - 5.15.152linux
linux/Kernel 5.16.0 - 6.1.82linux
linux/Kernel 5.5.0 - 5.10.213linux
linux/Kernel 6.2.0 - 6.6.22linux
linux/Kernel 6.7.0 - 6.7.10linux
Linux/Linux < 2.6.12
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 0866afaff19d8460308b022345ed116a12b1d0e1
... and 19 more
Published May 17, 2024
Tracked Since Feb 18, 2026