GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-27390 (GCVE-0-2024-27390)

Vulnerability from cvelistv5 – Published: 2024-05-01 13:05 – Updated: 2026-07-24 14:33
VLAI
Title
ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() As discussed in the past (commit 2d3916f31891 ("ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()")) I think the synchronize_net() call in ipv6_mc_down() is not needed. Under load, synchronize_net() can last between 200 usec and 5 ms. KASAN seems to agree as well.
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 15:43 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 94d6a071ab2f26eb18a83109940db0cec19552fd , < bfd2f3c58ad86ad33db80515e6c3503e0414e44b (git)
Affected: f185de28d9ae6c978135993769352e523ee8df06 , < 9d159d6637ccce25f879d662a480541ef4ba3a50 (git)
Affected: f185de28d9ae6c978135993769352e523ee8df06 , < a03ede2282ebbd181bd6f5c38cbfcb5765afcd04 (git)
Affected: f185de28d9ae6c978135993769352e523ee8df06 , < 26d4bac55750d535f1f0b8790dc26daf6089e373 (git)
Affected: f185de28d9ae6c978135993769352e523ee8df06 , < 7eb06ee5921189812e6b4bfe7b0f1e878be16df7 (git)
Affected: f185de28d9ae6c978135993769352e523ee8df06 , < 5da9a218340a2bc804dc4327e5804392e24a0b88 (git)
Affected: f185de28d9ae6c978135993769352e523ee8df06 , < 17ef8efc00b34918b966388b2af0993811895a8c (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.13
Unaffected: 0 , < 5.13 (semver)
Unaffected: 5.15.153 , ≤ 5.15.* (semver)
Unaffected: 6.1.83 , ≤ 6.1.* (semver)
Unaffected: 6.6.23 , ≤ 6.6.* (semver)
Unaffected: 6.7.11 , ≤ 6.7.* (semver)
Unaffected: 6.8.2 , ≤ 6.8.* (semver)
Unaffected: 6.9 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:34:52.217Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-27390",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:43:45.909098Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:28.377Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/mcast.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "bfd2f3c58ad86ad33db80515e6c3503e0414e44b",
              "status": "affected",
              "version": "94d6a071ab2f26eb18a83109940db0cec19552fd",
              "versionType": "git"
            },
            {
              "lessThan": "9d159d6637ccce25f879d662a480541ef4ba3a50",
              "status": "affected",
              "version": "f185de28d9ae6c978135993769352e523ee8df06",
              "versionType": "git"
            },
            {
              "lessThan": "a03ede2282ebbd181bd6f5c38cbfcb5765afcd04",
              "status": "affected",
              "version": "f185de28d9ae6c978135993769352e523ee8df06",
              "versionType": "git"
            },
            {
              "lessThan": "26d4bac55750d535f1f0b8790dc26daf6089e373",
              "status": "affected",
              "version": "f185de28d9ae6c978135993769352e523ee8df06",
              "versionType": "git"
            },
            {
              "lessThan": "7eb06ee5921189812e6b4bfe7b0f1e878be16df7",
              "status": "affected",
              "version": "f185de28d9ae6c978135993769352e523ee8df06",
              "versionType": "git"
            },
            {
              "lessThan": "5da9a218340a2bc804dc4327e5804392e24a0b88",
              "status": "affected",
              "version": "f185de28d9ae6c978135993769352e523ee8df06",
              "versionType": "git"
            },
            {
              "lessThan": "17ef8efc00b34918b966388b2af0993811895a8c",
              "status": "affected",
              "version": "f185de28d9ae6c978135993769352e523ee8df06",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/mcast.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.153",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.23",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.153",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.83",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.23",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.11",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.2",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()\n\nAs discussed in the past (commit 2d3916f31891 (\"ipv6: fix skb drops\nin igmp6_event_query() and igmp6_event_report()\")) I think the\nsynchronize_net() call in ipv6_mc_down() is not needed.\n\nUnder load, synchronize_net() can last between 200 usec and 5 ms.\n\nKASAN seems to agree as well."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-24T14:33:16.601Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/bfd2f3c58ad86ad33db80515e6c3503e0414e44b"
        },
        {
          "url": "https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50"
        },
        {
          "url": "https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04"
        },
        {
          "url": "https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373"
        },
        {
          "url": "https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7"
        },
        {
          "url": "https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88"
        },
        {
          "url": "https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c"
        }
      ],
      "title": "ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-27390",
    "datePublished": "2024-05-01T13:05:12.775Z",
    "dateReserved": "2024-02-25T13:47:42.677Z",
    "dateUpdated": "2026-07-24T14:33:16.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-27390",
      "date": "2026-09-15",
      "epss": "0.00223",
      "percentile": "0.12991"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()\\n\\nAs discussed in the past (commit 2d3916f31891 (\\\"ipv6: fix skb drops\\nin igmp6_event_query() and igmp6_event_report()\\\")) I think the\\nsynchronize_net() call in ipv6_mc_down() is not needed.\\n\\nUnder load, synchronize_net() can last between 200 usec and 5 ms.\\n\\nKASAN seems to agree as well.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: ipv6: mcast: elimina una barrera de sincronizaci\\u00f3n_net() en ipv6_mc_down() Como se discuti\\u00f3 en el pasado (commit 2d3916f31891 (\\\"ipv6: corrige ca\\u00eddas de skb en igmp6_event_query() e igmp6_event_report()\\\" )) Creo que la llamada sincronizar_net() en ipv6_mc_down() no es necesaria. Bajo carga, sincronizar_net() puede durar entre 200 usos y 5 ms. KASAN parece estar de acuerdo tambi\\u00e9n.\"}]",
      "id": "CVE-2024-27390",
      "lastModified": "2024-11-21T09:04:30.793",
      "published": "2024-05-01T13:15:51.697",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-27390\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-01T13:15:51.697\",\"lastModified\":\"2026-07-24T15:16:55.527\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()\\n\\nAs discussed in the past (commit 2d3916f31891 (\\\"ipv6: fix skb drops\\nin igmp6_event_query() and igmp6_event_report()\\\")) I think the\\nsynchronize_net() call in ipv6_mc_down() is not needed.\\n\\nUnder load, synchronize_net() can last between 200 usec and 5 ms.\\n\\nKASAN seems to agree as well.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ipv6: mcast: elimina una barrera de sincronizaci\u00f3n_net() en ipv6_mc_down() Como se discuti\u00f3 en el pasado (commit 2d3916f31891 (\\\"ipv6: corrige ca\u00eddas de skb en igmp6_event_query() e igmp6_event_report()\\\" )) Creo que la llamada sincronizar_net() en ipv6_mc_down() no es necesaria. Bajo carga, sincronizar_net() puede durar entre 200 usos y 5 ms. KASAN parece estar de acuerdo tambi\u00e9n.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ipv6/mcast.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"94d6a071ab2f26eb18a83109940db0cec19552fd\",\"lessThan\":\"bfd2f3c58ad86ad33db80515e6c3503e0414e44b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f185de28d9ae6c978135993769352e523ee8df06\",\"lessThan\":\"9d159d6637ccce25f879d662a480541ef4ba3a50\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f185de28d9ae6c978135993769352e523ee8df06\",\"lessThan\":\"a03ede2282ebbd181bd6f5c38cbfcb5765afcd04\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f185de28d9ae6c978135993769352e523ee8df06\",\"lessThan\":\"26d4bac55750d535f1f0b8790dc26daf6089e373\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f185de28d9ae6c978135993769352e523ee8df06\",\"lessThan\":\"7eb06ee5921189812e6b4bfe7b0f1e878be16df7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f185de28d9ae6c978135993769352e523ee8df06\",\"lessThan\":\"5da9a218340a2bc804dc4327e5804392e24a0b88\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f185de28d9ae6c978135993769352e523ee8df06\",\"lessThan\":\"17ef8efc00b34918b966388b2af0993811895a8c\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ipv6/mcast.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.13\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.13\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.153\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.83\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.23\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7.11\",\"lessThanOrEqual\":\"6.7.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.8.2\",\"lessThanOrEqual\":\"6.8.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T15:43:45.909098Z\",\"id\":\"CVE-2024-27390\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.13\",\"versionEndExcluding\":\"5.15.153\",\"matchCriteriaId\":\"7850BE17-94DE-4DDA-856C-B8DEE1C34FD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.83\",\"matchCriteriaId\":\"121A07F6-F505-4C47-86BF-9BB6CC7B6C19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.23\",\"matchCriteriaId\":\"E00814DC-0BA7-431A-9926-80FEB4A96C68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.7.11\",\"matchCriteriaId\":\"9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.8\",\"versionEndExcluding\":\"6.8.2\",\"matchCriteriaId\":\"543A75FF-25B8-4046-A514-1EA8EDD87AB1\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bfd2f3c58ad86ad33db80515e6c3503e0414e44b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T10:52:35+00:00",
      "cve": "CVE-2024-27390",
      "id": "CVE-2024-27390",
      "initial_release_date": "2024-05-01T00:00:00+00:00",
      "product_status:known_affected": "42",
      "product_status:known_not_affected": "156",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-27390.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-02T01:32:32Z",
      "cve": "CVE-2024-27390",
      "id": "CVE-2024-27390",
      "initial_release_date": "2024-05-03T02:09:31Z",
      "product_status:known_not_affected": "213",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-27390",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-27390.json",
      "version": "32"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:34:52.217Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-27390\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:43:45.909098Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:16.854Z\"}}], \"cna\": {\"title\": \"ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"94d6a071ab2f26eb18a83109940db0cec19552fd\", \"lessThan\": \"bfd2f3c58ad86ad33db80515e6c3503e0414e44b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f185de28d9ae6c978135993769352e523ee8df06\", \"lessThan\": \"9d159d6637ccce25f879d662a480541ef4ba3a50\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f185de28d9ae6c978135993769352e523ee8df06\", \"lessThan\": \"a03ede2282ebbd181bd6f5c38cbfcb5765afcd04\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f185de28d9ae6c978135993769352e523ee8df06\", \"lessThan\": \"26d4bac55750d535f1f0b8790dc26daf6089e373\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f185de28d9ae6c978135993769352e523ee8df06\", \"lessThan\": \"7eb06ee5921189812e6b4bfe7b0f1e878be16df7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f185de28d9ae6c978135993769352e523ee8df06\", \"lessThan\": \"5da9a218340a2bc804dc4327e5804392e24a0b88\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f185de28d9ae6c978135993769352e523ee8df06\", \"lessThan\": \"17ef8efc00b34918b966388b2af0993811895a8c\", \"versionType\": \"git\"}], \"programFiles\": [\"net/ipv6/mcast.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.13\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.13\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.15.153\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.83\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.23\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/ipv6/mcast.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/bfd2f3c58ad86ad33db80515e6c3503e0414e44b\"}, {\"url\": \"https://git.kernel.org/stable/c/9d159d6637ccce25f879d662a480541ef4ba3a50\"}, {\"url\": \"https://git.kernel.org/stable/c/a03ede2282ebbd181bd6f5c38cbfcb5765afcd04\"}, {\"url\": \"https://git.kernel.org/stable/c/26d4bac55750d535f1f0b8790dc26daf6089e373\"}, {\"url\": \"https://git.kernel.org/stable/c/7eb06ee5921189812e6b4bfe7b0f1e878be16df7\"}, {\"url\": \"https://git.kernel.org/stable/c/5da9a218340a2bc804dc4327e5804392e24a0b88\"}, {\"url\": \"https://git.kernel.org/stable/c/17ef8efc00b34918b966388b2af0993811895a8c\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()\\n\\nAs discussed in the past (commit 2d3916f31891 (\\\"ipv6: fix skb drops\\nin igmp6_event_query() and igmp6_event_report()\\\")) I think the\\nsynchronize_net() call in ipv6_mc_down() is not needed.\\n\\nUnder load, synchronize_net() can last between 200 usec and 5 ms.\\n\\nKASAN seems to agree as well.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.153\", \"versionStartIncluding\": \"5.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.83\", \"versionStartIncluding\": \"5.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.23\", \"versionStartIncluding\": \"5.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.11\", \"versionStartIncluding\": \"5.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8.2\", \"versionStartIncluding\": \"5.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9\", \"versionStartIncluding\": \"5.13\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-07-24T14:33:16.601Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-27390\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-24T14:33:16.601Z\", \"dateReserved\": \"2024-02-25T13:47:42.677Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-01T13:05:12.775Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.