CVE-2024-27024: debian debian_linux
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2024-27024DEBIAN-CVE-2024-27024
Published 01-05-2024Last modified 15-10-2026
Vulnerability summary
CVE-2024-27024 is a high (CVSS 7.8) vulnerability in debian debian_linux. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 22.5% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (NVD)EPSS score
0.31%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 27 · Related 24DLA-3840-1DLA-3842-1DSA-5681-1SUSE-SU-2024:3190-1SUSE-SU-2024:3194-1SUSE-SU-2024:3195-1SUSE-SU-2024:3209-1SUSE-SU-2024:3383-1SUSE-SU-2024:3483-1SUSE-SU-2024:3566-1SUSE-SU-2025:20044-1SUSE-SU-2025:20047-1USN-6820-1USN-6820-2USN-6821-1USN-6821-2USN-6821-3USN-6821-4USN-6828-1USN-6871-1USN-6892-1USN-6896-1USN-6896-2USN-6896-3USN-6896-4USN-6896-5USN-6919-1
Timeline
- 01-05-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't established yet, get_mr() will fail, trigger connection after get_mr().
CVSS metrics
3 scores · 3 sources · 1 versionHigh 7.8Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.31%
Chance of exploitation in the next 30 days
Percentile
23%
Versus all other CVEs
30-day change
0.00 pp
From 0.31% on 18-09-2026
18-09-202618-10-2026
EPSS score0.31%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu116 products
- linuxAll versions (No fix recorded) | < 5.4.0-189.209 | < 5.15.0-112.122
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1128.138 | < 5.15.0-1063.69
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.82-1 | < 6.7.12-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ 584a8279a44a800dea5a5c1e9d53a002e03016b4, < 786854141057751bc08eb26f1b02e97c1631c8f4 | ≥ 584a8279a44a800dea5a5c1e9d53a002e03016b4, < 997efea2bf3a4adb96c306b9ad6a91442237bf5b | ≥ 584a8279a44a800dea5a5c1e9d53a002e03016b4, < 9dfc15a10dfd44f8ff7f27488651cb5be6af83c2 | ≥ 584a8279a44a800dea5a5c1e9d53a002e03016b4, < b562ebe21ed9adcf42242797dd6cb75beef12bf0 | ≥ 584a8279a44a800dea5a5c1e9d53a002e03016b4, < 998fd719e6d6468b930ac0c44552ea9ff8b07b80 | ≥ 584a8279a44a800dea5a5c1e9d53a002e03016b4, < 2b505d05280739ce31d5708da840f42df827cb85 | ≥ 584a8279a44a800dea5a5c1e9d53a002e03016b4, < 907761307469adecb02461a14120e9a1812a5fb1 | ≥ 584a8279a44a800dea5a5c1e9d53a002e03016b4, < c055fc00c07be1f0df7375ab0036cebd1106ed38 | 952835ccd917682ebb705f89ff1e56fbf068a1d8 | 783941bd9f445a37c2854ec0b4cb9f9e603193a7 | 57d2ce1603101ce3f30d0ccdc35b98af08d2ed88 | 5ba1957f889f575f2a240eafe543c3fda5aa72e0 | ≥ 3.18.85, < 3.19 | ≥ 4.1.48, < 4.2 | ≥ 4.4.103, < 4.5 | ≥ 4.9.66, < 4.10 | 4.11
- linux_kernelEOL≥ 3.18.85, < 3.19 | ≥ 4.1.48, < 4.2 | ≥ 4.4.103, < 4.5 | ≥ 4.9.66, < 4.10 | ≥ 4.11, < 4.19.310 | ≥ 4.20, < 5.4.272 | ≥ 5.5, < 5.10.213 | ≥ 5.11, < 5.15.152 | ≥ 5.16, < 6.1.82 | ≥ 6.2, < 6.6.22 | ≥ 6.7, < 6.7.10 | 6.8 | 6.8:rc1 | 6.8:rc2 | 6.8:rc3 | 6.8:rc4 | 6.8:rc5 | 6.8:rc6
3 vendors · 120 products
References
30 links- lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlX TransferredMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlX TransferredMailing ListThird Party Advisory