Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-27402
HistoryMay 17, 2024 - 12:00 a.m.

CVE-2024-27402

2024-05-1700:00:00
ubuntu.com
ubuntu.com
2
linux
kernel
vulnerability
fix
phonenet
pep
receive queues
spin-lock
socket buffer

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:
phonet/pep: fix racy skb_queue_empty() use The receive queues are protected
by their respective spin-lock, not the socket lock. This could lead to
skb_peek() unexpectedly returning NULL or a pointer to an already dequeued
socket buffer.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%