CVE-2024-27396 (GCVE-0-2024-27396)
Vulnerability from cvelistv5
Published
2024-05-09 16:37
Modified
2025-05-04 12:55
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal of gtp_dellink, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free. To prevent this, it should be changed to hlist_for_each_entry_safe.
References
Impacted products
Vendor Product Version
Linux Linux Version: 043a283d24f40fea4c8a8d06b0e2694c8e372200
Version: c185e1d6e2752a4b656c3ca878c525fa11f55757
Version: 94dc550a5062030569d4aa76e10e50c8fc001930
Version: 94dc550a5062030569d4aa76e10e50c8fc001930
Version: 94dc550a5062030569d4aa76e10e50c8fc001930
Version: 94dc550a5062030569d4aa76e10e50c8fc001930
Version: 94dc550a5062030569d4aa76e10e50c8fc001930
Version: 94dc550a5062030569d4aa76e10e50c8fc001930
Version: a29c4303930bc0c25ae6a4f365dcdef71447b4ea
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-27396",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-28T15:23:40.567279Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:47:11.173Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:34:52.256Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/07b20d0a3dc13fb1adff10b60021a4924498da58"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/718df1bc226c383dd803397d7f5d95557eb81ac7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0caff3e6390f840666b8dc1ecebf985c2ef3f1dd"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2e74b3fd6bf542349758f283676dff3660327c07"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/25a1c2d4b1fcf938356a9688a96a6456abd44b29"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2aacd4de45477582993f8a8abb9505a06426bfb6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/cd957d1716ec979d8f5bf38fc659aeb9fdaa2474"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f2a904107ee2b647bb7794a1a82b67740d7c8a64"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/gtp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "07b20d0a3dc13fb1adff10b60021a4924498da58",
              "status": "affected",
              "version": "043a283d24f40fea4c8a8d06b0e2694c8e372200",
              "versionType": "git"
            },
            {
              "lessThan": "718df1bc226c383dd803397d7f5d95557eb81ac7",
              "status": "affected",
              "version": "c185e1d6e2752a4b656c3ca878c525fa11f55757",
              "versionType": "git"
            },
            {
              "lessThan": "0caff3e6390f840666b8dc1ecebf985c2ef3f1dd",
              "status": "affected",
              "version": "94dc550a5062030569d4aa76e10e50c8fc001930",
              "versionType": "git"
            },
            {
              "lessThan": "2e74b3fd6bf542349758f283676dff3660327c07",
              "status": "affected",
              "version": "94dc550a5062030569d4aa76e10e50c8fc001930",
              "versionType": "git"
            },
            {
              "lessThan": "25a1c2d4b1fcf938356a9688a96a6456abd44b29",
              "status": "affected",
              "version": "94dc550a5062030569d4aa76e10e50c8fc001930",
              "versionType": "git"
            },
            {
              "lessThan": "2aacd4de45477582993f8a8abb9505a06426bfb6",
              "status": "affected",
              "version": "94dc550a5062030569d4aa76e10e50c8fc001930",
              "versionType": "git"
            },
            {
              "lessThan": "cd957d1716ec979d8f5bf38fc659aeb9fdaa2474",
              "status": "affected",
              "version": "94dc550a5062030569d4aa76e10e50c8fc001930",
              "versionType": "git"
            },
            {
              "lessThan": "f2a904107ee2b647bb7794a1a82b67740d7c8a64",
              "status": "affected",
              "version": "94dc550a5062030569d4aa76e10e50c8fc001930",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a29c4303930bc0c25ae6a4f365dcdef71447b4ea",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/gtp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "lessThan": "5.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.313",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.275",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.158",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.313",
                  "versionStartIncluding": "4.19.93",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.275",
                  "versionStartIncluding": "5.4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.216",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.158",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.90",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.30",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.9",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.162",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gtp: Fix Use-After-Free in gtp_dellink\n\nSince call_rcu, which is called in the hlist_for_each_entry_rcu traversal\nof gtp_dellink, is not part of the RCU read critical section, it\nis possible that the RCU grace period will pass during the traversal and\nthe key will be free.\n\nTo prevent this, it should be changed to hlist_for_each_entry_safe."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T12:55:30.840Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/07b20d0a3dc13fb1adff10b60021a4924498da58"
        },
        {
          "url": "https://git.kernel.org/stable/c/718df1bc226c383dd803397d7f5d95557eb81ac7"
        },
        {
          "url": "https://git.kernel.org/stable/c/0caff3e6390f840666b8dc1ecebf985c2ef3f1dd"
        },
        {
          "url": "https://git.kernel.org/stable/c/2e74b3fd6bf542349758f283676dff3660327c07"
        },
        {
          "url": "https://git.kernel.org/stable/c/25a1c2d4b1fcf938356a9688a96a6456abd44b29"
        },
        {
          "url": "https://git.kernel.org/stable/c/2aacd4de45477582993f8a8abb9505a06426bfb6"
        },
        {
          "url": "https://git.kernel.org/stable/c/cd957d1716ec979d8f5bf38fc659aeb9fdaa2474"
        },
        {
          "url": "https://git.kernel.org/stable/c/f2a904107ee2b647bb7794a1a82b67740d7c8a64"
        }
      ],
      "title": "net: gtp: Fix Use-After-Free in gtp_dellink",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-27396",
    "datePublished": "2024-05-09T16:37:18.867Z",
    "dateReserved": "2024-02-25T13:47:42.677Z",
    "dateUpdated": "2025-05-04T12:55:30.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/07b20d0a3dc13fb1adff10b60021a4924498da58\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/718df1bc226c383dd803397d7f5d95557eb81ac7\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/0caff3e6390f840666b8dc1ecebf985c2ef3f1dd\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/2e74b3fd6bf542349758f283676dff3660327c07\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/25a1c2d4b1fcf938356a9688a96a6456abd44b29\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/2aacd4de45477582993f8a8abb9505a06426bfb6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/cd957d1716ec979d8f5bf38fc659aeb9fdaa2474\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f2a904107ee2b647bb7794a1a82b67740d7c8a64\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:34:52.256Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-27396\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-28T15:23:40.567279Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-28T15:23:45.736Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"net: gtp: Fix Use-After-Free in gtp_dellink\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"043a283d24f40fea4c8a8d06b0e2694c8e372200\", \"lessThan\": \"07b20d0a3dc13fb1adff10b60021a4924498da58\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"c185e1d6e2752a4b656c3ca878c525fa11f55757\", \"lessThan\": \"718df1bc226c383dd803397d7f5d95557eb81ac7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\", \"lessThan\": \"0caff3e6390f840666b8dc1ecebf985c2ef3f1dd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\", \"lessThan\": \"2e74b3fd6bf542349758f283676dff3660327c07\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\", \"lessThan\": \"25a1c2d4b1fcf938356a9688a96a6456abd44b29\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\", \"lessThan\": \"2aacd4de45477582993f8a8abb9505a06426bfb6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\", \"lessThan\": \"cd957d1716ec979d8f5bf38fc659aeb9fdaa2474\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\", \"lessThan\": \"f2a904107ee2b647bb7794a1a82b67740d7c8a64\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/net/gtp.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.5\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.5\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.313\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.275\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.216\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.158\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.90\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.30\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.9\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/net/gtp.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/07b20d0a3dc13fb1adff10b60021a4924498da58\"}, {\"url\": \"https://git.kernel.org/stable/c/718df1bc226c383dd803397d7f5d95557eb81ac7\"}, {\"url\": \"https://git.kernel.org/stable/c/0caff3e6390f840666b8dc1ecebf985c2ef3f1dd\"}, {\"url\": \"https://git.kernel.org/stable/c/2e74b3fd6bf542349758f283676dff3660327c07\"}, {\"url\": \"https://git.kernel.org/stable/c/25a1c2d4b1fcf938356a9688a96a6456abd44b29\"}, {\"url\": \"https://git.kernel.org/stable/c/2aacd4de45477582993f8a8abb9505a06426bfb6\"}, {\"url\": \"https://git.kernel.org/stable/c/cd957d1716ec979d8f5bf38fc659aeb9fdaa2474\"}, {\"url\": \"https://git.kernel.org/stable/c/f2a904107ee2b647bb7794a1a82b67740d7c8a64\"}], \"x_generator\": {\"engine\": \"bippy-5f407fcff5a0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: gtp: Fix Use-After-Free in gtp_dellink\\n\\nSince call_rcu, which is called in the hlist_for_each_entry_rcu traversal\\nof gtp_dellink, is not part of the RCU read critical section, it\\nis possible that the RCU grace period will pass during the traversal and\\nthe key will be free.\\n\\nTo prevent this, it should be changed to hlist_for_each_entry_safe.\"}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2024-12-19T08:54:12.776Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-27396\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-19T08:54:12.776Z\", \"dateReserved\": \"2024-02-25T13:47:42.677Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-09T16:37:18.867Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.