01 Record

CVE-2024-27005

interconnect: Don't access req_list while it's being manipulated

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

interconnect: Don't access req_list while it's being manipulated

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.18% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 7.2% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-01 05:28Z2 YR AGO

Last updated

2026-08-05 11:28Z2 MO AGO

Reserved

2024-02-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class
CWE-667Improper LockingClass

Data version

5.2

Document digest

ec994bad5a8e74c05c9c4f635350352030cccb5eedffff16f4b45410c768cae3

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux9be2957f014d91088db1eb5dd09d9a03d7184dce to < fe549d8e976300d0dd75bd904eb216bed8b145e0, ee42bfc791aa3cd78e29046f26a09d189beb3efb to < 19ec82b3cad1abef2a929262b8c1528f4e0c192d, af42269c3523492d71ebbe11fefae2653e9cdc78 to < d0d04efa2e367921654b5106cc5c05e3757c2b42, af42269c3523492d71ebbe11fefae2653e9cdc78 to < 4c65507121ea8e0b47fae6d2049c8688390d46b6, af42269c3523492d71ebbe11fefae2653e9cdc78 to < de1bf25b6d771abdb52d43546cf57ad775fb68a1, 2f3a124696d43de3c837f87a9f767c56ee86cf2a, 5.15.133 to < 5.15.151, 6.1.55 to < 6.1.81, 6.5.5 to < 6.6, 6.6—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/fe549d8e976300d0dd75bd904eb216bed8b145e0
git.kernel.orghttps://git.kernel.org/stable/c/19ec82b3cad1abef2a929262b8c1528f4e0c192d
git.kernel.orghttps://git.kernel.org/stable/c/d0d04efa2e367921654b5106cc5c05e3757c2b42
git.kernel.orghttps://git.kernel.org/stable/c/4c65507121ea8e0b47fae6d2049c8688390d46b6
git.kernel.orghttps://git.kernel.org/stable/c/de1bf25b6d771abdb52d43546cf57ad775fb68a1
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/

07 Fixed in

Debian 13

linux
Fixed in 6.8.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.8.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.