CVE-2024-26677 rxrpc: Fix delayed ACKs to not set the reference serial number

2024-04-0207:01:41

Linux

github.com

cve-2024-26677

rxrpc

fix delayed acks

AI Score

6.7

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix delayed ACKs to not set the reference serial number

Fix the construction of delayed ACKs to not set the reference serial number
as they can’t be used as an RTT reference.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "17926a79320a",
        "lessThan": "200cb50b9e15",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "17926a79320a",
        "lessThan": "63719f490e6a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "17926a79320a",
        "lessThan": "e7870cf13d20",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/rxrpc/ar-internal.h",
      "net/rxrpc/call_event.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "2.6.22"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "2.6.22",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.6.17",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.7.5",
        "versionType": "custom",
        "lessThanOrEqual": "6.7.*"
      },
      {
        "status": "unaffected",
        "version": "6.8",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/rxrpc/ar-internal.h",
      "net/rxrpc/call_event.c"
    ],
    "defaultStatus": "affected"
  }
]