CVE-2024-27419: netrom: Fix data-races around sysctl_net_busy_read
In the Linux kernel, the following vulnerability has been resolved:
netrom: Fix data-races around sysctlnetbusyread
We need to protect the reader reading the sysctl value because the value can be changed concurrently.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27419?
CVE-2024-27419 has a medium severity rating due to potential data races in the Linux kernel.
How do I fix CVE-2024-27419?
To fix CVE-2024-27419, upgrade to the patched versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which systems are affected by CVE-2024-27419?
CVE-2024-27419 affects the Linux kernel versions prior to the patched releases listed.
What kind of vulnerability is CVE-2024-27419?
CVE-2024-27419 is a data race vulnerability associated with sysctl value reading in the Linux kernel.
When was CVE-2024-27419 disclosed?
CVE-2024-27419 was disclosed in 2024 and addresses concurrency issues in the Linux kernel.