7.5

CVE-2024-41007: tcp: avoid too many retransmit packets

Modified
AliasesUBUNTU-CVE-2024-41007DEBIAN-CVE-2024-41007
Published 15-07-2024Last modified 05-08-2026

Vulnerability summary

CVE-2024-41007 is a high (CVSS 7.5) vulnerability in linux. EPSS estimates a 0.77% chance of exploitation in the next 30 days, higher than 55.7% of scored vulnerabilities.

Priority
Prioritisesevere

Severe, CVSS 7.5 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 1% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.77%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 37 · Related 31
DLA-4008-1DSA-5747-1RHSA-2024:10771RHSA-2024:7000RHSA-2024:7001RHSA-2024:9315

Timeline

  1. 15-07-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCP_USER_TIMEOUT, and the other peer retracted its window to zero, tcp_retransmit_timer() can retransmit a packet every two jiffies (2 ms for HZ=1000), for about 4 minutes after TCP_USER_TIMEOUT has 'expired'. The fix is to make sure tcp_rtx_probe0_timed_out() takes icsk->icsk_user_timeout into account. Before blamed commit, the socket would not timeout after icsk->icsk_user_timeout, but would use standard exponential backoff for the retransmits. Also worth noting that before commit e89688e3e978 ("net: tcp: fix unexcepted socket die when snd_wnd is 0"), the issue would last 2 minutes instead of 4.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.77%

Chance of exploitation in the next 30 days

Percentile

56%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.77% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu125 products
  • linux< 5.4.0-195.215 | < 5.15.0-121.131 | < 6.8.0-48.48
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1132.142 | < 5.15.0-1069.75 | < 6.8.0-1018.20
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ b701a99e431db784714c32fc6b68123045714679, < 7bb7670f92bfbd05fc41a8f9a8f358b7ffed65f4 | ≥ b701a99e431db784714c32fc6b68123045714679, < d2346fca5bed130dc712f276ac63450201d52969 | ≥ b701a99e431db784714c32fc6b68123045714679, < 5d7e64d70a11d988553a08239c810a658e841982 | ≥ b701a99e431db784714c32fc6b68123045714679, < 04317a2471c2f637b4c49cbd0e9c0d04a519f570 | ≥ b701a99e431db784714c32fc6b68123045714679, < e113cddefa27bbf5a79f72387b8fbd432a61a466 | ≥ b701a99e431db784714c32fc6b68123045714679, < dfcdd7f89e401d2c6616be90c76c2fac3fa98fde | ≥ b701a99e431db784714c32fc6b68123045714679, < 66cb64a1d2239cd0309f9b5038b05462570a5be1 | ≥ b701a99e431db784714c32fc6b68123045714679, < 97a9063518f198ec0adb2ecb89789de342bb8283 | 4.19
  • linux_kernel≥ 4.19, < 5.4.280 | ≥ 5.5, < 5.10.222 | ≥ 5.11, < 5.15.163 | ≥ 5.16, < 6.1.100 | ≥ 6.2, < 6.6.41 | ≥ 6.7, < 6.9.10
Debian1 product
  • linux< 6.1.106-1 | < 6.9.10-1

3 vendors · 128 products

References

36 links
Show all 36 references