← CVE Intelligence

CVE-2024-27402

phonet/pep: fix racy skb_queue_empty() use PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skb_queue_empty() use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skb_peek() unexpectedly returning NULL or a pointer to an already dequeued socket buffer.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 9641458d3ec42def729fde64669abf07f3220cd5 before 7d3914a477eed92b48c493a8631cc4554ab4fd4f; affected 9641458d3ec42def729fde64669abf07f3220cd5 before 9d5523e065b568e79dfaa2ea1085a5bcf74baf78; affected 9641458d3ec42def729fde64669abf07f3220cd5 before 0a9f558c72c47472c38c05fcb72c70abb9104277; affected 9641458d3ec42def729fde64669abf07f3220cd5 before 8ef4fcc7014b9f93619851d6b78d6cc2789a4c88; affected 9641458d3ec42def729fde64669abf07f3220cd5 before 7d2a894d7f487dcb894df023e9d3014cf5b93fe5
Linux / Linuxaffected 2.6.28; unaffected 0 before 2.6.28; unaffected 5.15.181 through 5.15.*; unaffected 6.1.80 through 6.1.*; unaffected 6.6.19 through 6.6.*; unaffected 6.7.7 through 6.7.*; unaffected 6.8 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.