What’s Vulnerable › Vulnerabilities

CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use

• Severity: medium (CVSS 5.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skb_queue_empty() use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skb_peek() unexpectedly returning NULL or a pointer to an already dequeued socket buffer.

Affected products

• Linux kernel: from 2.6.28 before 5.15.181; from 5.16 before 6.1.80; from 6.2 before 6.6.19; from 6.7 before 6.7.7; 6.8-rc1, 6.8-rc2, 6.8-rc3, 6.8-rc4, 6.8-rc5 — fixed in 5.15.181, 6.1.80, 6.6.19, 6.7.7

How to fix

Upgrade to a fixed version: Linux kernel 5.15.181, 6.1.80, 6.6.19, 6.7.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a9f558c72c47472c38c05fcb72c70abb9104277
• https://git.kernel.org/stable/c/7d2a894d7f487dcb894df023e9d3014cf5b93fe5
• https://git.kernel.org/stable/c/7d3914a477eed92b48c493a8631cc4554ab4fd4f
• https://git.kernel.org/stable/c/8ef4fcc7014b9f93619851d6b78d6cc2789a4c88
• https://git.kernel.org/stable/c/9d5523e065b568e79dfaa2ea1085a5bcf74baf78
• https://git.kernel.org/stable/c/0a9f558c72c47472c38c05fcb72c70abb9104277
• https://git.kernel.org/stable/c/7d2a894d7f487dcb894df023e9d3014cf5b93fe5
• https://git.kernel.org/stable/c/8ef4fcc7014b9f93619851d6b78d6cc2789a4c88
• https://git.kernel.org/stable/c/9d5523e065b568e79dfaa2ea1085a5bcf74baf78

Get alerted when CVE-2024-27402 or the next vulnerability affects your stack