CVE-2024-27404: mptcp: fix data races on remote_id
In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix data races on remoteid
Similar to the previous patch, address the data race on remoteid, adding the suitable ONCE annotations.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix data races on remoteid
The Linux kernel CVE team has assigned CVE-2024-27404 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-27404-ab54@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.81 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.19 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7.7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8 - Upgrade
Upgrade
linux kernel (mptcp)to a version that resolves this vulnerability.Patch CVE-2024-27404
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27404?
The severity of CVE-2024-27404 is typically classified as moderate due to the nature of the data races addressed in the Linux kernel.
How do I fix CVE-2024-27404?
To fix CVE-2024-27404, update your Linux kernel to version 6.1.81, 6.6.19, 6.7.7, or 6.8 as recommended.
Which software versions are affected by CVE-2024-27404?
CVE-2024-27404 affects specific versions of the Linux kernel, namely versions prior to 6.1.81, 6.6.19, 6.7.7, and 6.8.
What type of vulnerability is CVE-2024-27404?
CVE-2024-27404 is a data race vulnerability in the Linux kernel that affects the MultiPath TCP (MPTCP) implementation.
Is CVE-2024-27404 a local or remote vulnerability?
CVE-2024-27404 can be exploited remotely, potentially allowing an attacker to interfere with data transmission.