High severity · published May 1, 2024
CVE-2024-27024
net/rds: fix WARNING in rds_conn_connect_if_down
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
net/rds: fix WARNING in rds_conn_connect_if_down
If connection isn't established yet, get_mr() will fail, trigger connection after
get_mr().
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
3.18.85 before 3.19; 4.1.48 before 4.2; 4.4.103 before 4.5; 4.9.66 before 4.10; 4.11 before 4.19.310; 4.20 before 5.4.272; +12 more · source: NVD
LI
Linux · Linux
584a8279a44a800dea5a5c1e9d53a002e03016b4 before 786854141057751bc08eb26f1b02e97c1631c8f4; 584a8279a44a800dea5a5c1e9d53a002e03016b4 before 997efea2bf3a4adb96c306b9ad6a91442237bf5b; 584a8279a44a800dea5a5c1e9d53a002e03016b4 before 9dfc15a10dfd44f8ff7f27488651cb5be6af83c2; 584a8279a44a800dea5a5c1e9d53a002e03016b4 before b562ebe21ed9adcf42242797dd6cb75beef12bf0; 584a8279a44a800dea5a5c1e9d53a002e03016b4 before 998fd719e6d6468b930ac0c44552ea9ff8b07b80; 584a8279a44a800dea5a5c1e9d53a002e03016b4 before 2b505d05280739ce31d5708da840f42df827cb85; +11 more · source: vendor
DL
Debian Linux · Debian
10.0 · source: NVD
SS
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens
before V1.1.1 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-27024
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-27024
Patch
https://git.kernel.org/stable/c/2b505d05280739ce31d5708da840f42df827cb85
Patch
https://git.kernel.org/stable/c/786854141057751bc08eb26f1b02e97c1631c8f4
Patch
https://git.kernel.org/stable/c/907761307469adecb02461a14120e9a1812a5fb1
Patch
https://git.kernel.org/stable/c/997efea2bf3a4adb96c306b9ad6a91442237bf5b
Patch
https://git.kernel.org/stable/c/998fd719e6d6468b930ac0c44552ea9ff8b07b80
Patch
https://git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability