IM
IronMonkey Threat Research

CVE-2024-27419 MEDIUM

Published: 2024-05-17 | Last Modified: 2026-05-12 | Status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading the sysctl value because the value can be changed concurrently.

Additional Descriptions (1)

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netrom: corrige carreras de datos alrededor de sysctl_net_busy_read Necesitamos proteger al lector que lee el valor de sysctl porque el valor se puede cambiar simultáneamente.

CVSS Metrics

Base Score: 4.7 (MEDIUM)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.0

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Primary
en CWE-362

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd3699ef7c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2d3af4700> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2a2f69500> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3401fe140> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340227380> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340224f80> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd384646700> Operating System
linux linux_kernel 2.6.12 <built-in method update of dict object at 0x7fd368d34440> Operating System
linux linux_kernel 2.6.12 <built-in method update of dict object at 0x7fd384644b00> Operating System
linux linux_kernel 2.6.12 <built-in method update of dict object at 0x7fd2d3af5a80> Operating System
linux linux_kernel 2.6.12 <built-in method update of dict object at 0x7fd370266600> Operating System
linux linux_kernel 2.6.12 <built-in method update of dict object at 0x7fd340176100> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd36b3b9a40> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd38557e840> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd3701cd500> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd3402278c0> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd2d3af4480> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd340225100> Operating System
linux linux_kernel 6.8 <built-in method update of dict object at 0x7fd340225480> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd340cb3c40> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.8:rc7:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

References