CVE-2024-26677

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26677
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix delayed ACKs to not set the reference serial number Fix the construction of delayed ACKs to not set the reference serial number as they can't be used as an RTT reference.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2 Patch
https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae Patch
https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef Patch
https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2 Patch
https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae Patch
https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
History

17 Mar 2025, 15:42

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2 - () https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2 - Patch
References () https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae - () https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae - Patch
References () https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef - () https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef - Patch
CWE CWE-476

21 Nov 2024, 09:02

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2 - () https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2 -
References () https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae - () https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae -
References () https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef - () https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef -

02 Apr 2024, 12:50

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: rxrpc: corrige los ACK retrasados para no establecer el número de serie de referencia. Se corrige la construcción de los ACK retrasados para no establecer el número de serie de referencia, ya que no se pueden usar como referencia RTT.

02 Apr 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-02 07:15

Updated : 2025-03-17 15:42

NVD link : CVE-2024-26677

Mitre link : CVE-2024-26677

CVE.ORG link : CVE-2024-26677

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference