CVE-2024-27419

netrom: Fix data-races around sysctl_net_busy_read

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

netrom: Fix data-races around sysctl_net_busy_read

We need to protect the reader reading the sysctl value because the
value can be changed concurrently.

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netrom: corrige carreras de datos alrededor de sysctl_net_busy_read Necesitamos proteger al lector que lee el valor de sysctl porque el valor se puede cambiar simultáneamente.

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-02-25 CVE Reserved
2024-05-17 CVE Published
2024-05-18 EPSS Updated
2024-11-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (11)

URL	Tag	Source
https://git.kernel.org/stable/c/1da177e4c3f41524e886b7f1b8a0c1fc7321cac2	Vuln. Introduced
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/d623fd5298d95b65d27ef5a618ebf39541074856	2024-03-15
https://git.kernel.org/stable/c/f9055fa2b2931261d5f89948ee5bc315b6a22d4a	2024-03-15
https://git.kernel.org/stable/c/bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3	2024-03-15
https://git.kernel.org/stable/c/0866afaff19d8460308b022345ed116a12b1d0e1	2024-03-15
https://git.kernel.org/stable/c/43464808669ba9d23996f0b6d875450191687caf	2024-03-15
https://git.kernel.org/stable/c/34cab94f7473e7b09f5205d4583fb5096cb63b5b	2024-03-15
https://git.kernel.org/stable/c/16d71319e29d5825ab53f263b59fdd8dc2d60ad4	2024-03-15
https://git.kernel.org/stable/c/d380ce70058a4ccddc3e5f5c2063165dc07672c6	2024-03-07

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.12 < 4.19.310 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.12 < 4.19.310"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.12 < 5.4.272 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.12 < 5.4.272"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.12 < 5.10.213 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.12 < 5.10.213"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.12 < 5.15.152 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.12 < 5.15.152"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.12 < 6.1.82 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.12 < 6.1.82"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.12 < 6.6.22 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.12 < 6.6.22"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.12 < 6.7.10 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.12 < 6.7.10"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.12 < 6.8 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.12 < 6.8"		en		Affected