CVE-2024-27419
netrom: Fix data-races around sysctl_net_busy_read
MEDIUM
4.7
CVSS Score
Published: May 17, 2024 at 12:01 PM UTC
Updated: October 15, 2026 at 01:17 AM UTC
3 products affected across 3 vendorsLinux KernelDebian LinuxSIMATIC S7-1500 TM MFP
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM4.7
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading the sysctl value because the value can be changed concurrently.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Debian Linux· Debiandrupal
95%2.6.13 ≤ v < 4.19.3104.20 ≤ v < 5.4.2725.11 ≤ v < 5.15.1525.16 ≤ v < 6.1.825.5 ≤ v < 5.10.2136.2 ≤ v < 6.6.226.7 ≤ v < 6.7.101da177e4c3f41524e886b7f1b8a0c1fc7321cac22.6.122.6.12 rc22.6.12 rc32.6.12 rc42.6.12 rc56.86.8 rc16.8 rc26.8 rc36.8 rc46.8 rc56.8 rc66.8 rc7
Vendor states this is fixed in 0866afaff19d8460308b022345ed116a12b1d0e1 (fixed)
Vendor states this is fixed in 16d71319e29d5825ab53f263b59fdd8dc2d60ad4 (fixed)
Vendor states this is fixed in 34cab94f7473e7b09f5205d4583fb5096cb63b5b (fixed)
Vendor states this is fixed in 43464808669ba9d23996f0b6d875450191687caf (fixed)
Vendor states this is fixed in bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3 (fixed)
Vendor states this is fixed in d380ce70058a4ccddc3e5f5c2063165dc07672c6 (fixed)
Vendor states this is fixed in d623fd5298d95b65d27ef5a618ebf39541074856 (fixed)
Vendor states this is fixed in f9055fa2b2931261d5f89948ee5bc315b6a22d4a (fixed)
Vendor states this is fixed in 2.6.12 (unaffected)
Vendor states this is fixed in 4.19.310 (unaffected)
Vendor states this is fixed in 5.10.213 (unaffected)
Vendor states this is fixed in 5.15.152 (unaffected)
Vendor states this is fixed in 5.4.272 (unaffected)
Vendor states this is fixed in 6.1.82 (unaffected)
Vendor states this is fixed in 6.6.22 (unaffected)
Vendor states this is fixed in 6.7.10 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)
All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/0866afaff19d8460308b022345ed116a12b1d0e1
- https://git.kernel.org/stable/c/16d71319e29d5825ab53f263b59fdd8dc2d60ad4
- https://git.kernel.org/stable/c/34cab94f7473e7b09f5205d4583fb5096cb63b5b
- https://git.kernel.org/stable/c/43464808669ba9d23996f0b6d875450191687caf
- https://git.kernel.org/stable/c/bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3
References (11)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0866afaff19d8460308b022345ed116a12b1d0e1Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/16d71319e29d5825ab53f263b59fdd8dc2d60ad4Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/34cab94f7473e7b09f5205d4583fb5096cb63b5bPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/43464808669ba9d23996f0b6d875450191687cafPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/bbf950a6e96a91cf8cf0c71117b94ed3fafc9dd3Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d380ce70058a4ccddc3e5f5c2063165dc07672c6Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d623fd5298d95b65d27ef5a618ebf39541074856Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f9055fa2b2931261d5f89948ee5bc315b6a22d4aSSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- LOCAL
- Complexity
- HIGH
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-362
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card