CVE-2024-27388

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

• ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
• AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.96% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 58.9% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2024-05-01 13:05Z2 YR AGO

Last updated

2026-08-05 11:29Z1 MO AGO

Reserved

2024-02-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-401Missing Release of Memory after Effective LifetimeVariant

Data version

5.2

Document digest

7d0be7387a1e5a22ea10c6ae381b6a4d55c320397ef0cae52886185dddb06d25

• git.kernel.orghttps://git.kernel.org/stable/c/b97c37978ca825557d331c9012e0c1ddc0e42364
• git.kernel.orghttps://git.kernel.org/stable/c/bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8
• git.kernel.orghttps://git.kernel.org/stable/c/bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8
• git.kernel.orghttps://git.kernel.org/stable/c/dd292e884c649f9b1c18af0ec75ca90b390cd044
• git.kernel.orghttps://git.kernel.org/stable/c/934212a623cbab851848b6de377eb476718c3e4c
• git.kernel.orghttps://git.kernel.org/stable/c/5e6013ae2c8d420faea553d363935f65badd32c3
• git.kernel.orghttps://git.kernel.org/stable/c/9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4
• git.kernel.orghttps://git.kernel.org/stable/c/996997d1fb2126feda550d6adcedcbd94911fc69
• git.kernel.orghttps://git.kernel.org/stable/c/3cfcfc102a5e57b021b786a755a38935e357797d
• lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
• lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html