← back
CVE-2024-26677

rxrpc: Fix delayed ACKs to not set the reference serial number

EPSS 0.2%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
02 Apr 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix delayed ACKs to not set the reference serial number Fix the construction of delayed ACKs to not set the reference serial number as they can't be used as an RTT reference.
Affected products
Linux · Linux
References
https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23aehttps://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef