net/rds: fix WARNING in rds_conn_connect_if_down
Summary
| CVE | CVE-2024-27024 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2024-05-01 13:15:48 UTC |
| Updated | 2026-05-12 12:16:30 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't established yet, get_mr() will fail, trigger connection after get_mr(). |
Risk And Classification
Primary CVSS: v3.1 7.8 HIGH from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types: NVD-CWE-noinfo
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 584a8279a44a800dea5a5c1e9d53a002e03016b4 786854141057751bc08eb26f1b02e97c1631c8f4 git | Not specified |
| CNA | Linux | Linux | affected 584a8279a44a800dea5a5c1e9d53a002e03016b4 997efea2bf3a4adb96c306b9ad6a91442237bf5b git | Not specified |
| CNA | Linux | Linux | affected 584a8279a44a800dea5a5c1e9d53a002e03016b4 9dfc15a10dfd44f8ff7f27488651cb5be6af83c2 git | Not specified |
| CNA | Linux | Linux | affected 584a8279a44a800dea5a5c1e9d53a002e03016b4 b562ebe21ed9adcf42242797dd6cb75beef12bf0 git | Not specified |
| CNA | Linux | Linux | affected 584a8279a44a800dea5a5c1e9d53a002e03016b4 998fd719e6d6468b930ac0c44552ea9ff8b07b80 git | Not specified |
| CNA | Linux | Linux | affected 584a8279a44a800dea5a5c1e9d53a002e03016b4 2b505d05280739ce31d5708da840f42df827cb85 git | Not specified |
| CNA | Linux | Linux | affected 584a8279a44a800dea5a5c1e9d53a002e03016b4 907761307469adecb02461a14120e9a1812a5fb1 git | Not specified |
| CNA | Linux | Linux | affected 584a8279a44a800dea5a5c1e9d53a002e03016b4 c055fc00c07be1f0df7375ab0036cebd1106ed38 git | Not specified |
| CNA | Linux | Linux | affected 952835ccd917682ebb705f89ff1e56fbf068a1d8 git | Not specified |
| CNA | Linux | Linux | affected 783941bd9f445a37c2854ec0b4cb9f9e603193a7 git | Not specified |
| CNA | Linux | Linux | affected 57d2ce1603101ce3f30d0ccdc35b98af08d2ed88 git | Not specified |
| CNA | Linux | Linux | affected 5ba1957f889f575f2a240eafe543c3fda5aa72e0 git | Not specified |
| CNA | Linux | Linux | affected 4.11 | Not specified |
| CNA | Linux | Linux | unaffected 4.11 semver | Not specified |
| CNA | Linux | Linux | unaffected 4.19.310 4.19.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.4.272 5.4.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.10.213 5.10.* semver | Not specified |
| CNA | Linux | Linux | unaffected 5.15.152 5.15.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.1.82 6.1.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.22 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.7.10 6.7.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.8 * original_commit_for_fix | Not specified |
| ADP | Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem | affected * custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/907761307469adecb02461a14120e9a1812a5fb1 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| lists.debian.org/debian-lts-announce/2024/06/msg00017.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | Mailing List, Third Party Advisory |
| git.kernel.org/stable/c/997efea2bf3a4adb96c306b9ad6a91442237bf5b | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| cert-portal.siemens.com/productcert/html/ssa-265688.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| git.kernel.org/stable/c/998fd719e6d6468b930ac0c44552ea9ff8b07b80 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/2b505d05280739ce31d5708da840f42df827cb85 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/786854141057751bc08eb26f1b02e97c1631c8f4 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| git.kernel.org/stable/c/b562ebe21ed9adcf42242797dd6cb75beef12bf0 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| lists.debian.org/debian-lts-announce/2024/06/msg00020.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | Mailing List, Third Party Advisory |
| git.kernel.org/stable/c/c055fc00c07be1f0df7375ab0036cebd1106ed38 | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.