Lucene search

K
redhatcveRedhat.comRH:CVE-2024-27390
HistoryMay 01, 2024 - 9:58 p.m.

CVE-2024-27390

2024-05-0121:58:02
redhat.com
access.redhat.com
12
linux kernel
vulnerability
cve-2024-27390
ipv6
mcast
synchronize_net()
kasan

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 (“ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()”)) I think the synchronize_net() call in ipv6_mc_down() is not needed. Under load, synchronize_net() can last between 200 usec and 5 ms. KASAN seems to agree as well.

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

10.3%