CVE-2024-23849: linux linux_kernel Off-by-one Error

CVSS: 5.5v3.1MediumModified

AliasesUBUNTU-CVE-2024-23849DEBIAN-CVE-2024-23849

Published 23-01-2024Last modified 04-11-2025

Vulnerability summary

CVE-2024-23849 is a medium (CVSS 5.5) Off-by-one Error vulnerability in linux linux_kernel. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 22.3% of scored vulnerabilities.

Overall risk

22/100

0100

Low · default modelHow is this calculated?

CVSS score

5.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.31%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

23-01-2024
PublishedVulnerability first disclosed.
04-11-2025
Last modifiedVulnerability information updated.

Description

In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.

CVSS metrics

4 scores · 4 sources · 1 version

v3.15.5

EPSS trend

Probability

0.31%

Chance of exploitation in the next 30 days

Percentile

22%

Versus all other CVEs

30-day change

0.00 pp

From 0.31% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.31%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-193Off-by-one ErrorA product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

Affected systems

Ubuntu115 products

linuxAll versions (No fix recorded) | < 5.4.0-181.201 | < 5.15.0-106.116
linux-allwinner-5.19All versions (No fix recorded)
linux-awsAll versions (No fix recorded) | < 5.4.0-1124.134 | < 5.15.0-1061.67
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1061.67~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1124.134~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-aws-fipsAll versions (No fix recorded) | < 5.4.0-1124.134+fips1 | < 5.15.0-1061.67+fips1
linux-aws-hweAll versions (No fix recorded)
linux-azureAll versions (No fix recorded) | < 5.4.0-1129.136 | < 5.15.0-1063.72
linux-azure-4.15All versions (No fix recorded)
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1063.72~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1129.136~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5< 6.5.0-1022.23~22.04.1
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1063.72.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-azure-fipsAll versions (No fix recorded) | < 5.4.0-1129.136+fips1 | < 5.15.0-1063.72+fips1
linux-bluefield< 5.4.0-1084.91 | < 5.15.0-1043.45
linux-fipsAll versions (No fix recorded) | < 5.4.0-1098.108 | < 5.15.0-106.116+fips1
linux-gcpAll versions (No fix recorded) | < 5.4.0-1128.137 | < 5.15.0-1059.67
linux-gcp-4.15All versions (No fix recorded)
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1059.67~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1128.137~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5< 6.5.0-1022.24~22.04.1
linux-gcp-fipsAll versions (No fix recorded) | < 5.4.0-1128.137+fips1 | < 5.15.0-1059.67+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1058.63
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.4.0-1091.95 | < 5.15.0-1044.51
linux-gkeop-5.15< 5.15.0-1044.51~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-106.116~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.4< 5.4.0-181.201~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.5< 6.5.0-41.41~22.04.2
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1071.76 | < 5.15.0-1054.57
linux-ibm-5.15< 5.15.0-1054.57~20.04.1
linux-ibm-5.4< 5.4.0-1071.76~18.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1054.56
linux-intel-iotg< 5.15.0-1057.63
linux-intel-iotg-5.15< 5.15.0-1058.64~20.04.1
linux-iot< 5.4.0-1036.37
linux-kvmAll versions (No fix recorded) | < 5.4.0-1112.119 | < 5.15.0-1058.63
linux-lowlatency< 5.15.0-106.116
linux-lowlatency-hwe-5.15< 5.15.0-106.116~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.5< 6.5.0-41.41.1~22.04.1
linux-nvidia< 5.15.0-1054.55
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5< 6.5.0-1021.22
linux-nvidia-tegra< 5.15.0-1026.26
linux-nvidia-tegra-5.15< 5.15.0-1027.27~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1015.15
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1< 6.1.0-1035.35
linux-oem-6.5< 6.5.0-1024.25
linux-oracleAll versions (No fix recorded) | < 5.4.0-1123.132 | < 5.15.0-1059.65
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1059.65~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1123.132~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.5< 6.5.0-1024.24~22.04.1
linux-raspi< 5.4.0-1108.120 | < 5.15.0-1054.57
linux-raspi-5.4< 5.4.0-1108.120~18.04.1
linux-raspi-realtime< 6.8.0-2001.1
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1062.70
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1057.61~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.5< 6.5.0-40.40.1~22.04.1
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5< 6.5.0-1015.16~22.04.1
linux-xilinx-zynqmp< 5.4.0-1043.47 | < 5.15.0-1030.34