7.8
High
CVE-2024-27396 In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since…
Description
In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtp_dellink Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal of gtp_dellink, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free. To prevent this, it should be changed to hlist_for_each_entry_safe.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.9 | earliest → < 6.9 | 6.9 |
| Linux 6.8 | earliest → < 6.8.9 | 6.8.9 |
| Linux 6.6 | earliest → < 6.6.30 | 6.6.30 |
| Linux 6.1 | earliest → < 6.1.90 | 6.1.90 |
| Linux 5.15 | earliest → < 5.15.158 | 5.15.158 |
| Linux 5.10 | earliest → < 5.10.216 | 5.10.216 |
| Linux | 5.5 | No fix stated |
| Linux 5.4 | earliest → < 5.4.275 | 5.4.275 |
| Linux 4.19 | earliest → < 4.19.313 | 4.19.313 |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM RST2428P 3.1 | earliest → < 3.1 | 3.1 |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | Versions not published | |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1 | earliest → < 3.1 | 3.1 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1.1 | 1.1.1 |
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated