Lucene search

K
redhatcveRedhat.comRH:CVE-2024-36904
HistoryJun 03, 2024 - 1:33 p.m.

CVE-2024-36904

2024-06-0313:33:27
redhat.com
access.redhat.com
2
linux kernel
tcp vulnerability
cve-2024-36904
refcount_inc_not_zero
use-after-free
port reuse

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

A use-after-free flaw was found in the Linux kernel’s TCP protocol in how a local user triggers a complex race condition during connection to the socket. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%