CVE-2024-42291: linux
Vulnerability summary
CVE-2024-42291 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 31 · Related 27Timeline
- 17-08-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ice: Add a per-VF limit on number of FDIR filters While the iavf driver adds a s/w limit (128) on the number of FDIR filters that the VF can request, a malicious VF driver can request more than that and exhaust the resources for other VFs. Add a similar limit in ice.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.23%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
0.00 pp
From 0.23% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu117 products
- linux< 5.15.0-133.144 | < 6.8.0-50.51
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1078.85 | < 6.8.0-1020.22
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 1f7ea1cd6a3748427512ccc9582e18cd9efea966, < e81b674ead8e2172b2a69e7b45e079239ace4dbc | ≥ 1f7ea1cd6a3748427512ccc9582e18cd9efea966, < 8e02cd98a6e24389d476e28436d41e620ed8e559 | ≥ 1f7ea1cd6a3748427512ccc9582e18cd9efea966, < d62389073a5b937413e2d1bc1da06ccff5103c0c | ≥ 1f7ea1cd6a3748427512ccc9582e18cd9efea966, < 292081c4e7f575a79017d5cbe1a0ec042783976f | ≥ 1f7ea1cd6a3748427512ccc9582e18cd9efea966, < 6ebbe97a488179f5dc85f2f1e0c89b486e99ee97 | 5.13
- linux_kernel≥ 5.13, < 5.15.172 | ≥ 5.16, < 6.1.103 | ≥ 6.2, < 6.6.44 | ≥ 6.7, < 6.10.3
Debian1 product
- linux< 6.1.106-1 | < 6.10.3-1
3 vendors · 120 products
