01 Record

CVE-2024-27395

net: openvswitch: Fix Use-After-Free in ovs_ct_exit

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net: openvswitch: Fix Use-After-Free in ovs_ct_exit

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 15.7% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-09 16:37Z2 YR AGO

Last updated

2026-08-05 11:29Z1 MO AGO

Reserved

2024-02-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

86def6ef265f2d353e0b907572726c1aed81a7fee3ddc052f65d294cf0cd36bc

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 2db9a8c0a01fa1c762c1e61a13c212c492752994, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 589523cf0b384164e445dd5db8d5b1bf97982424, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 35880c3fa6f8fe281a19975d2992644588ca33d3, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 9048616553c65e750d43846f225843ed745ec0d4, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to < bca6fa2d9a9f560e6b89fd5190b05cc2f5d422c1, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to < eaa5e164a2110d2fb9e16c8a29e4501882235137, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to < edee0758747d7c219e29db9ed1d4eb33e8d32865, 11efd5cb04a184eea4f57b68ea63dddd463158d1 to < 5ea7b72d4fac2fdbc0425cd8f2ea33abe95235b2, 4.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2db9a8c0a01fa1c762c1e61a13c212c492752994
git.kernel.orghttps://git.kernel.org/stable/c/589523cf0b384164e445dd5db8d5b1bf97982424
git.kernel.orghttps://git.kernel.org/stable/c/35880c3fa6f8fe281a19975d2992644588ca33d3
git.kernel.orghttps://git.kernel.org/stable/c/9048616553c65e750d43846f225843ed745ec0d4
git.kernel.orghttps://git.kernel.org/stable/c/bca6fa2d9a9f560e6b89fd5190b05cc2f5d422c1
git.kernel.orghttps://git.kernel.org/stable/c/eaa5e164a2110d2fb9e16c8a29e4501882235137
git.kernel.orghttps://git.kernel.org/stable/c/edee0758747d7c219e29db9ed1d4eb33e8d32865
git.kernel.orghttps://git.kernel.org/stable/c/5ea7b72d4fac2fdbc0425cd8f2ea33abe95235b2
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-613116.html

01 Record index

CVE-2024-27395

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-27395

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References