Rapid7

vulnerability

Debian: CVE-2024-27402: linux -- security update

Severity
6
CVSS
(AV:L/AC:M/Au:S/C:P/I:P/A:C)
Published
May 17, 2024
Added
Jul 30, 2024
Modified
Mar 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

phonet/pep: fix racy skb_queue_empty() use

The receive queues are protected by their respective spin-lock, not
the socket lock. This could lead to skb_peek() unexpectedly
returning NULL or a pointer to an already dequeued socket buffer.

Solution

debian-upgrade-linux
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.