5.5

CVE-2024-36006: debian debian_linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-36006DEBIAN-CVE-2024-36006
Published 20-05-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-36006 is a medium (CVSS 5.5) vulnerability in debian debian_linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.4% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 33 · Related 26
DLA-3842-1MGASA-2024-0263MGASA-2024-0266RHSA-2024:5101RHSA-2024:5102RHSA-2024:9315

Timeline

  1. 20-05-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage Both the function that migrates all the chunks within a region and the function that migrates all the entries within a chunk call list_first_entry() on the respective lists without checking that the lists are not empty. This is incorrect usage of the API, which leads to the following warning [1]. Fix by returning if the lists are empty as there is nothing to migrate in this case. [1] WARNING: CPU: 0 PID: 6437 at drivers/net/ethernet/mellanox/mlxsw/spectrum_acl_tcam.c:1266 mlxsw_sp_acl_tcam_vchunk_migrate_all+0x1f1/0> Modules linked in: CPU: 0 PID: 6437 Comm: kworker/0:37 Not tainted 6.9.0-rc3-custom-00883-g94a65f079ef6 #39 Hardware name: Mellanox Technologies Ltd. MSN3700/VMOD0005, BIOS 5.11 01/06/2019 Workqueue: mlxsw_core mlxsw_sp_acl_tcam_vregion_rehash_work RIP: 0010:mlxsw_sp_acl_tcam_vchunk_migrate_all+0x1f1/0x2c0 [...] Call Trace: <TASK> mlxsw_sp_acl_tcam_vregion_rehash_work+0x6c/0x4a0 process_one_work+0x151/0x370 worker_thread+0x2cb/0x3e0 kthread+0xd0/0x100 ret_from_fork+0x34/0x50 ret_from_fork_asm+0x1a/0x30 </TASK>

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu124 products
  • linux< 5.4.0-189.209 | < 5.15.0-116.126 | < 6.8.0-40.40
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1128.138 | < 5.15.0-1065.71 | < 6.8.0-1013.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf, < 0b2c13b670b168e324e1cf109e67056a20fd610a | ≥ 6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf, < 09846c2309b150b8ce4e0ce96f058197598fc530 | ≥ 6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf, < 64435b64e43d8ee60faa46c0cd04e323e8b2a7b0 | ≥ 6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf, < 4526a56e02da3725db979358964df9cd9c567154 | ≥ 6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf, < ab4ecfb627338e440ae11def004c524a00d93e40 | ≥ 6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf, < af8b593c3dd9df82cb199be65863af004b09fd97 | ≥ 6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf, < b377add0f0117409c418ddd6504bd682ebe0bf79 | 5.1
  • linux_kernel≥ 5.1, < 5.4.275 | ≥ 5.5, < 5.10.216 | ≥ 5.11, < 5.15.158 | ≥ 5.16, < 6.1.90 | ≥ 6.2, < 6.6.30 | ≥ 6.7, < 6.8.9 | 6.9:rc1 | 6.9:rc2 | 6.9:rc3 | 6.9:rc4 | 6.9:rc5

3 vendors · 128 products

References

32 links
Show all 32 references