What’s Vulnerable › Vulnerabilities

CVE-2024-27404: mptcp: fix data races on remote_id

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-08-04
• Weakness: CWE-362

Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remote_id Similar to the previous patch, address the data race on remote_id, adding the suitable ONCE annotations.

Affected products

• Linux kernel: from 6.0 before 6.1.81; from 6.2 before 6.6.19; from 6.7 before 6.7.7; 6.8-rc1, 6.8-rc2, 6.8-rc3, 6.8-rc4, 6.8-rc5 — fixed in 6.1.81, 6.6.19, 6.7.7

How to fix

Upgrade to a fixed version: Linux kernel 6.1.81, 6.6.19, 6.7.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2dba5774e8ed326a78ad4339d921a4291281ea6e
• https://git.kernel.org/stable/c/967d3c27127e71a10ff5c083583a038606431b61
• https://git.kernel.org/stable/c/987c3ed7297e5661bc7f448f06fc366e497ac9b2
• https://git.kernel.org/stable/c/e64148635509bf13eea851986f5a0b150e5bd066
• https://git.kernel.org/stable/c/2dba5774e8ed326a78ad4339d921a4291281ea6e
• https://git.kernel.org/stable/c/967d3c27127e71a10ff5c083583a038606431b61
• https://git.kernel.org/stable/c/987c3ed7297e5661bc7f448f06fc366e497ac9b2
• https://git.kernel.org/stable/c/e64148635509bf13eea851986f5a0b150e5bd066

Get alerted when CVE-2024-27404 or the next vulnerability affects your stack