[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-26740":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":39,"aliases":40,"duplicate_of":9,"upstream":41,"downstream":42,"duplicates":65,"related":66,"reserved_at":9,"published_at":72,"modified_at":73,"state":74,"summary":75,"references_raw":84,"kevs":99,"epss":100,"epss_history":103,"metrics":325,"affected":331},"CVE-2024-26740","In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_mirred: use the backlog for mirred ingress\n\nThe test Davide added in commit ca22da2fbd69 (\"act_mirred: use the backlog\nfor nested calls to mirred ingress\") hangs our testing VMs every 10 or so\nruns, with the familiar tcp_v4_rcv -> tcp_v4_rcv deadlock reported by\nlockdep.\n\nThe problem as previously described by Davide (see Link) is that\nif we reverse flow of traffic with the redirect (egress -> ingress)\nwe may reach the same socket which generated the packet. And we may\nstill be holding its socket lock. The common solution to such deadlocks\nis to put the packet in the Rx backlog, rather than run the Rx path\ninline. Do that for all egress -> ingress reversals, not just once\nwe started to nest mirred calls.\n\nIn the past there was a concern that the backlog indirection will\nlead to loss of error reporting / less accurate stats. But the current\nworkaround does not seem to address the issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-667","Improper Locking","The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.","weakness","Draft","Class",[19,31,35],{"id":20,"name":21,"techniques":22},"CAPEC-25","Forced Deadlock",[23],{"id":24,"name":25,"tactics":26,"countermeasures":30},"T1499.004","Application or System Exploitation",[27],{"id":28,"name":29},"TA0105","Impact",[],{"id":32,"name":33,"techniques":34},"CAPEC-26","Leveraging Race Conditions",[],{"id":36,"name":37,"techniques":38},"CAPEC-27","Leveraging Race Conditions via Symbolic Links",[],[],[],[],[43,45,47,49,51,53,55,57,59,61,63],{"_key":44},"SUSE-SU-2024:2203-1",{"_key":46},"SUSE-SU-2025:01983-1",{"_key":48},"SUSE-SU-2024:2135-1",{"_key":50},"SUSE-SU-2024:2973-1",{"_key":52},"SUSE-SU-2025:20008-1",{"_key":54},"DEBIAN-CVE-2024-26740",{"_key":56},"RHSA-2024:5101",{"_key":58},"RHSA-2024:5102",{"_key":60},"RHSA-2025:2270",{"_key":62},"RHSA-2024:9315",{"_key":64},"UBUNTU-CVE-2024-26740",[],[67,68,69,70,71],{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":52},"2024-04-03T17:00:25.534Z","2026-05-11T20:03:14.566Z","Analyzed",{"cisa_kev":76,"cisa_ransomware":76,"cisa_vendor":9,"epss_severity":77,"epss_score":78,"severity":79,"severity_score":80,"severity_version":81,"severity_source":82,"severity_vector":83,"severity_status":74},false,"low",0.00007,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[85,91,95],{"url":86,"sources":87,"tags":89},"https://git.kernel.org/stable/c/7c787888d164689da8b1b115f3ef562c1e843af4",[88,82],"cve.org",[90],"Patch",{"url":92,"sources":93,"tags":94},"https://git.kernel.org/stable/c/60ddea1600bc476e0f5e02bce0e29a460ccbf0be",[88,82],[90],{"url":96,"sources":97,"tags":98},"https://git.kernel.org/stable/c/52f671db18823089a02f07efc04efdb2272ddc17",[88,82],[90],[],{"date":101,"score":78,"percentile":102},"2026-06-03",0.00598,[104,107,109,112,114,117,120,122,124,127,129,131,134,136,138,142,145,148,151,153,156,158,161,163,165,168,171,173,176,178,180,183,185,188,191,194,197,199,202,205,208,211,214,216,219,222,225,227,230,233,235,237,239,241,243,245,247,249,251,253,255,257,260,263,266,268,270,273,275,278,280,282,284,286,288,290,292,294,296,298,300,302,304,306,308,310,313,316,319,322],{"date":105,"score":78,"percentile":106},"2025-11-04",0.00374,{"date":108,"score":78,"percentile":106},"2025-11-05",{"date":110,"score":78,"percentile":111},"2025-11-06",0.00375,{"date":113,"score":78,"percentile":111},"2025-11-07",{"date":115,"score":78,"percentile":116},"2025-11-08",0.00373,{"date":118,"score":78,"percentile":119},"2025-11-09",0.00372,{"date":121,"score":78,"percentile":119},"2025-11-10",{"date":123,"score":78,"percentile":119},"2025-11-11",{"date":125,"score":78,"percentile":126},"2025-11-12",0.00367,{"date":128,"score":78,"percentile":126},"2025-11-13",{"date":130,"score":78,"percentile":126},"2025-11-14",{"date":132,"score":78,"percentile":133},"2025-11-15",0.00368,{"date":135,"score":78,"percentile":133},"2025-11-16",{"date":137,"score":78,"percentile":133},"2025-11-17",{"date":139,"score":140,"percentile":141},"2025-11-18",0.00057,0.13285,{"date":143,"score":140,"percentile":144},"2025-11-19",0.13303,{"date":146,"score":140,"percentile":147},"2025-11-20",0.13318,{"date":149,"score":78,"percentile":150},"2025-11-21",0.00377,{"date":152,"score":78,"percentile":150},"2025-11-22",{"date":154,"score":78,"percentile":155},"2025-11-23",0.00378,{"date":157,"score":78,"percentile":155},"2025-11-24",{"date":159,"score":78,"percentile":160},"2025-11-25",0.00379,{"date":162,"score":78,"percentile":155},"2025-11-26",{"date":164,"score":78,"percentile":155},"2025-11-27",{"date":166,"score":78,"percentile":167},"2025-11-28",0.00383,{"date":169,"score":78,"percentile":170},"2025-11-29",0.00385,{"date":172,"score":78,"percentile":170},"2025-11-30",{"date":174,"score":78,"percentile":175},"2025-12-01",0.00382,{"date":177,"score":78,"percentile":175},"2025-12-02",{"date":179,"score":78,"percentile":167},"2025-12-03",{"date":181,"score":78,"percentile":182},"2025-12-04",0.00389,{"date":184,"score":78,"percentile":182},"2025-12-05",{"date":186,"score":78,"percentile":187},"2025-12-06",0.00387,{"date":189,"score":78,"percentile":190},"2025-12-07",0.00388,{"date":192,"score":78,"percentile":193},"2025-12-08",0.00393,{"date":195,"score":78,"percentile":196},"2025-12-09",0.00404,{"date":198,"score":78,"percentile":196},"2025-12-10",{"date":200,"score":78,"percentile":201},"2025-12-11",0.00407,{"date":203,"score":78,"percentile":204},"2025-12-12",0.00411,{"date":206,"score":78,"percentile":207},"2025-12-13",0.0041,{"date":209,"score":78,"percentile":210},"2025-12-14",0.00408,{"date":212,"score":78,"percentile":213},"2025-12-15",0.00406,{"date":215,"score":78,"percentile":213},"2025-12-16",{"date":217,"score":78,"percentile":218},"2025-12-17",0.00405,{"date":220,"score":78,"percentile":221},"2025-12-18",0.00403,{"date":223,"score":78,"percentile":224},"2025-12-19",0.00401,{"date":226,"score":78,"percentile":224},"2025-12-20",{"date":228,"score":78,"percentile":229},"2025-12-21",0.004,{"date":231,"score":78,"percentile":232},"2025-12-22",0.00402,{"date":234,"score":78,"percentile":213},"2025-12-23",{"date":236,"score":78,"percentile":201},"2025-12-24",{"date":238,"score":78,"percentile":210},"2025-12-25",{"date":240,"score":78,"percentile":201},"2025-12-26",{"date":242,"score":78,"percentile":229},"2025-12-27",{"date":244,"score":78,"percentile":201},"2025-12-28",{"date":246,"score":78,"percentile":213},"2025-12-29",{"date":248,"score":78,"percentile":232},"2025-12-30",{"date":250,"score":78,"percentile":232},"2025-12-31",{"date":252,"score":78,"percentile":224},"2026-01-01",{"date":254,"score":78,"percentile":221},"2026-01-02",{"date":256,"score":78,"percentile":221},"2026-01-03",{"date":258,"score":78,"percentile":259},"2026-01-04",0.00397,{"date":261,"score":78,"percentile":262},"2026-01-05",0.00394,{"date":264,"score":78,"percentile":265},"2026-01-06",0.00392,{"date":267,"score":78,"percentile":265},"2026-01-07",{"date":269,"score":78,"percentile":262},"2026-01-08",{"date":271,"score":78,"percentile":272},"2026-01-09",0.00398,{"date":274,"score":78,"percentile":229},"2026-01-10",{"date":276,"score":78,"percentile":277},"2026-01-11",0.00396,{"date":279,"score":78,"percentile":193},"2026-01-12",{"date":281,"score":78,"percentile":265},"2026-01-13",{"date":283,"score":78,"percentile":277},"2026-01-14",{"date":285,"score":78,"percentile":277},"2026-01-15",{"date":287,"score":78,"percentile":259},"2026-01-16",{"date":289,"score":78,"percentile":259},"2026-01-17",{"date":291,"score":78,"percentile":224},"2026-01-18",{"date":293,"score":78,"percentile":272},"2026-01-19",{"date":295,"score":78,"percentile":277},"2026-01-20",{"date":297,"score":78,"percentile":259},"2026-01-21",{"date":299,"score":78,"percentile":272},"2026-01-22",{"date":301,"score":78,"percentile":224},"2026-01-23",{"date":303,"score":78,"percentile":221},"2026-01-24",{"date":305,"score":78,"percentile":221},"2026-01-25",{"date":307,"score":78,"percentile":213},"2026-01-26",{"date":309,"score":78,"percentile":204},"2026-01-27",{"date":311,"score":78,"percentile":312},"2026-01-28",0.00414,{"date":314,"score":78,"percentile":315},"2026-01-29",0.00416,{"date":317,"score":78,"percentile":318},"2026-01-30",0.00426,{"date":320,"score":78,"percentile":321},"2026-01-31",0.0043,{"date":323,"score":78,"percentile":324},"2026-02-01",0.00431,[326],{"source":82,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":327,"cvss_v4_0":9},{"baseScore":80,"baseSeverity":328,"vectorString":83,"impactScore":329,"exploitabilityScore":330},"MEDIUM",6,4.6,[332,352],{"ecosystem":9,"name":333,"vendor":334,"product":334,"cpe_part":335,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":336},"Linux","linux","a",[337,344,347,350],{"version":338,"is_range":339,"range_type":88,"version_start":340,"version_start_type":341,"version_end":342,"version_end_type":343,"fixed_in":9},">= 53592b3640019f2834701093e38272fdfd367ad8, \u003C 7c787888d164689da8b1b115f3ef562c1e843af4",true,"53592b3640019f2834701093e38272fdfd367ad8","including","7c787888d164689da8b1b115f3ef562c1e843af4","excluding",{"version":345,"is_range":339,"range_type":88,"version_start":340,"version_start_type":341,"version_end":346,"version_end_type":343,"fixed_in":9},">= 53592b3640019f2834701093e38272fdfd367ad8, \u003C 60ddea1600bc476e0f5e02bce0e29a460ccbf0be","60ddea1600bc476e0f5e02bce0e29a460ccbf0be",{"version":348,"is_range":339,"range_type":88,"version_start":340,"version_start_type":341,"version_end":349,"version_end_type":343,"fixed_in":9},">= 53592b3640019f2834701093e38272fdfd367ad8, \u003C 52f671db18823089a02f07efc04efdb2272ddc17","52f671db18823089a02f07efc04efdb2272ddc17",{"version":351,"is_range":76,"range_type":88,"version_start":351,"version_start_type":341,"version_end":351,"version_end_type":341,"fixed_in":9},"4.10",{"ecosystem":9,"name":353,"vendor":334,"product":354,"cpe_part":355,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":356},"linux kernel","linux_kernel","o",[357,361,365,367,369,371,373],{"version":358,"is_range":339,"range_type":359,"version_start":351,"version_start_type":341,"version_end":360,"version_end_type":343,"fixed_in":9},"gte4.10_lt6.6.19","cpe","6.6.19",{"version":362,"is_range":339,"range_type":359,"version_start":363,"version_start_type":341,"version_end":364,"version_end_type":343,"fixed_in":9},"gte6.7_lt6.7.7","6.7","6.7.7",{"version":366,"is_range":76,"range_type":359,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.8:rc1",{"version":368,"is_range":76,"range_type":359,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.8:rc2",{"version":370,"is_range":76,"range_type":359,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.8:rc3",{"version":372,"is_range":76,"range_type":359,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.8:rc4",{"version":374,"is_range":76,"range_type":359,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.8:rc5"]