CVE-2024-27402
Summary
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skb_queue_empty() use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skb_peek() unexpectedly returning NULL or a pointer to an already dequeued socket buffer.
- HIGH
- LOCAL
- LOW
- UNCHANGED
- NONE
- LOW
- LOW
- HIGH
References
Advisory Timeline
- Published