CVE-2024-26677 rxrpc: Fix delayed ACKs to not set the reference serial number

2024-04-0207:01:41

Linux

www.cve.org

vulnerability

linux kernel

rxrpc

fixed

delayed acks

reference serial number

rtt reference.

AI Score

6.7

Confidence

High

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix delayed ACKs to not set the reference serial number

Fix the construction of delayed ACKs to not set the reference serial number
as they can’t be used as an RTT reference.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/rxrpc/ar-internal.h",
      "net/rxrpc/call_event.c"
    ],
    "versions": [
      {
        "version": "17926a79320a",
        "lessThan": "200cb50b9e15",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "17926a79320a",
        "lessThan": "63719f490e6a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "17926a79320a",
        "lessThan": "e7870cf13d20",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/rxrpc/ar-internal.h",
      "net/rxrpc/call_event.c"
    ],
    "versions": [
      {
        "version": "2.6.22",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.22",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.17",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.5",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]