CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down
In the Linux kernel, the following vulnerability has been resolved:
net/rds: fix WARNING in rdsconnconnectifdown
If connection isn't established yet, getmr() will fail, trigger connection after getmr().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Compensating control
In net/rds, when a connection has not yet been established, call get_mr() first and trigger the connection only after get_mr() completes.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27024?
The severity of CVE-2024-27024 is classified as medium.
How do I fix CVE-2024-27024?
To fix CVE-2024-27024, update the Linux kernel to the latest patched version as specified by your distribution.
Which versions of the Linux kernel are affected by CVE-2024-27024?
CVE-2024-27024 affects various versions ranging from 3.18.85 to 6.8-rc6 of the Linux kernel.
Is CVE-2024-27024 being actively exploited?
There is currently no evidence to suggest that CVE-2024-27024 is being actively exploited in the wild.
What software should I monitor for CVE-2024-27024?
Monitor any systems running affected versions of the Linux kernel to ensure they are updated promptly.