CVE-2024-27024 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't established yet, get_mr() will fail, trigger connection after get_mr().

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/2b505d05280739ce31d5708da840f42df827cb85
https://git.kernel.org/stable/c/786854141057751bc08eb26f1b02e97c1631c8f4
https://git.kernel.org/stable/c/907761307469adecb02461a14120e9a1812a5fb1
https://git.kernel.org/stable/c/997efea2bf3a4adb96c306b9ad6a91442237bf5b
https://git.kernel.org/stable/c/998fd719e6d6468b930ac0c44552ea9ff8b07b80
https://git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2
https://git.kernel.org/stable/c/b562ebe21ed9adcf42242797dd6cb75beef12bf0
https://git.kernel.org/stable/c/c055fc00c07be1f0df7375ab0036cebd1106ed38
https://lore.kernel.org/linux-cve-announce/2024050107-CVE-2024-27024-efbd@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-27024
https://www.cve.org/CVERecord?id=CVE-2024-27024

History

Tue, 05 Nov 2024 10:45:00 +0000

Type	Values Removed	Values Added
References	https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

Tue, 01 Oct 2024 02:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-909

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-01T12:49:24.696Z

Updated: 2024-11-05T09:20:10.477Z

Reserved: 2024-02-19T14:20:24.210Z

Link: CVE-2024-27024

Vulnrichment

Updated: 2024-09-11T12:42:17.597Z

NVD

Status : Awaiting Analysis

Published: 2024-05-01T13:15:48.847

Modified: 2024-11-05T10:16:19.917

Link: CVE-2024-27024

Redhat

Severity : Moderate

Publid Date: 2024-05-01T00:00:00Z

Links: CVE-2024-27024 - Bugzilla

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-27024", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.210Z", "datePublished": "2024-05-01T12:49:24.696Z", "dateUpdated": "2024-11-05T09:20:10.477Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:20:10.477Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: fix WARNING in rds_conn_connect_if_down\n\nIf connection isn't established yet, get_mr() will fail, trigger connection after\nget_mr()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/rds/rdma.c", "net/rds/send.c"], "versions": [{"version": "584a8279a44a", "lessThan": "786854141057", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "997efea2bf3a", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "9dfc15a10dfd", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "b562ebe21ed9", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "998fd719e6d6", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "2b505d052807", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "907761307469", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "c055fc00c07b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/rds/rdma.c", "net/rds/send.c"], "versions": [{"version": "4.11", "status": "affected"}, {"version": "0", "lessThan": "4.11", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.310", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.272", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.213", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.152", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.82", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.22", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.10", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/786854141057751bc08eb26f1b02e97c1631c8f4"}, {"url": "https://git.kernel.org/stable/c/997efea2bf3a4adb96c306b9ad6a91442237bf5b"}, {"url": "https://git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2"}, {"url": "https://git.kernel.org/stable/c/b562ebe21ed9adcf42242797dd6cb75beef12bf0"}, {"url": "https://git.kernel.org/stable/c/998fd719e6d6468b930ac0c44552ea9ff8b07b80"}, {"url": "https://git.kernel.org/stable/c/2b505d05280739ce31d5708da840f42df827cb85"}, {"url": "https://git.kernel.org/stable/c/907761307469adecb02461a14120e9a1812a5fb1"}, {"url": "https://git.kernel.org/stable/c/c055fc00c07be1f0df7375ab0036cebd1106ed38"}], "title": "net/rds: fix WARNING in rds_conn_connect_if_down", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:21:05.871Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/786854141057751bc08eb26f1b02e97c1631c8f4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/997efea2bf3a4adb96c306b9ad6a91442237bf5b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b562ebe21ed9adcf42242797dd6cb75beef12bf0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/998fd719e6d6468b930ac0c44552ea9ff8b07b80", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2b505d05280739ce31d5708da840f42df827cb85", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/907761307469adecb02461a14120e9a1812a5fb1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c055fc00c07be1f0df7375ab0036cebd1106ed38", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27024", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:44:34.133420Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:33:36.432Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-27024", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.210Z", "datePublished": "2024-05-01T12:49:24.696Z", "dateUpdated": "2024-08-02T00:21:05.871Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:27:13.230Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: fix WARNING in rds_conn_connect_if_down\n\nIf connection isn't established yet, get_mr() will fail, trigger connection after\nget_mr()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/rds/rdma.c", "net/rds/send.c"], "versions": [{"version": "584a8279a44a", "lessThan": "786854141057", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "997efea2bf3a", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "9dfc15a10dfd", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "b562ebe21ed9", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "998fd719e6d6", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "2b505d052807", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "907761307469", "status": "affected", "versionType": "git"}, {"version": "584a8279a44a", "lessThan": "c055fc00c07b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/rds/rdma.c", "net/rds/send.c"], "versions": [{"version": "4.11", "status": "affected"}, {"version": "0", "lessThan": "4.11", "status": "unaffected", "versionType": "custom"}, {"version": "4.19.310", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.272", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.213", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.15.152", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.1.82", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.6.22", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.7.10", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/786854141057751bc08eb26f1b02e97c1631c8f4"}, {"url": "https://git.kernel.org/stable/c/997efea2bf3a4adb96c306b9ad6a91442237bf5b"}, {"url": "https://git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2"}, {"url": "https://git.kernel.org/stable/c/b562ebe21ed9adcf42242797dd6cb75beef12bf0"}, {"url": "https://git.kernel.org/stable/c/998fd719e6d6468b930ac0c44552ea9ff8b07b80"}, {"url": "https://git.kernel.org/stable/c/2b505d05280739ce31d5708da840f42df827cb85"}, {"url": "https://git.kernel.org/stable/c/907761307469adecb02461a14120e9a1812a5fb1"}, {"url": "https://git.kernel.org/stable/c/c055fc00c07be1f0df7375ab0036cebd1106ed38"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"}], "title": "net/rds: fix WARNING in rds_conn_connect_if_down", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27024", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:44:34.133420Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2024-09-11T12:42:17.597Z"}, "title": "CISA ADP Vulnrichment"}]}, "dataVersion": "5.1"}

{"bugzilla": {"description": "kernel: net/rds: fix WARNING in rds_conn_connect_if_down", "id": "2278486", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2278486"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-909", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet/rds: fix WARNING in rds_conn_connect_if_down\nIf connection isn't established yet, get_mr() will fail, trigger connection after\nget_mr().", "A flaw was found in the Linux kernel\u2019s rds module. Under some conditions, a warning can be triggered in the rds_conn_connect_if_down function if the connection is not yet established, causing system instability and resulting in a denial of service."], "name": "CVE-2024-27024", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-05-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-27024\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-27024\nhttps://lore.kernel.org/linux-cve-announce/2024050107-CVE-2024-27024-efbd@gregkh/T"], "statement": "The rds module is not built in the kernel shipped in Red Hat Enterprise Linux 8 and 9, so it is not affected by this vulnerability.", "threat_severity": "Moderate", "upstream_fix": "kernel 4.19.310, kernel 5.4.272, kernel 5.10.213, kernel 5.15.152, kernel 6.1.82, kernel 6.6.22, kernel 6.7.10, kernel 6.8"}