Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2024-27402

phonet/pep: fix racy skb_queue_empty() use

Description

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skb_queue_empty() use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skb_peek() unexpectedly returning NULL or a pointer to an already dequeued socket buffer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9641458d3ec42def729fde64669abf07f3220cd5 to < 7d3914a477eed92b48c493a8631cc4554ab4fd4faffected
  • 9641458d3ec42def729fde64669abf07f3220cd5 to < 9d5523e065b568e79dfaa2ea1085a5bcf74baf78affected
  • 9641458d3ec42def729fde64669abf07f3220cd5 to < 0a9f558c72c47472c38c05fcb72c70abb9104277affected
  • 9641458d3ec42def729fde64669abf07f3220cd5 to < 8ef4fcc7014b9f93619851d6b78d6cc2789a4c88affected
  • 9641458d3ec42def729fde64669abf07f3220cd5 to < 7d2a894d7f487dcb894df023e9d3014cf5b93fe5affected

Linux Linux

Default version status: affected

  • 2.6.28affected
  • 0 to < 2.6.28unaffected
  • 5.15.181 to ≤ 5.15.*unaffected
  • 6.1.80 to ≤ 6.1.*unaffected
  • 6.6.19 to ≤ 6.6.*unaffected
  • 6.7.7 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References