PT-2024-27023 · Linux+5 · Linux Kernel+5

Christoph Paasch · Published 2024-05-21 · Updated 2025-03-27 · CVE-2024-36484

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37

Description The Linux kernel has a vulnerability that allows the socket state check at accept time to be relaxed. This issue was reported by Christoph and is caused by the reproducer invoking shutdown() before entering the listener status. After a specific commit, the child process can reach the accept syscall in FIN WAIT1 status. Eric noted that the existing assertion in inet accept() can be relaxed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

BDU:2025-03908

CVE-2024-36484

DSA-5747-1

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-2030

OESA-2024-2031

OESA-2024-2076

OESA-2025-1095

OPENSUSE-SU-2024_4314-1

OPENSUSE-SU-2024_4315-1

OPENSUSE-SU-2024_4316-1

OPENSUSE-SU-2024_4376-1

SUSE-SU-2024:4314-1

SUSE-SU-2024:4315-1

SUSE-SU-2024:4316-1

SUSE-SU-2024:4318-1

SUSE-SU-2024:4364-1

SUSE-SU-2024:4376-1

SUSE-SU-2024:4387-1

SUSE-SU-2025:0236-1

SUSE-SU-2025:20163-1

SUSE-SU-2025:20164-1

SUSE-SU-2025:20246-1

SUSE-SU-2025:20247-1

SUSE-SU-2025_0236-1

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7008-1

USN-7029-1

USN-7088-1

USN-7088-2

USN-7088-3

USN-7088-4

USN-7088-5

USN-7100-1

USN-7100-2

USN-7119-1

USN-7123-1

USN-7144-1

USN-7194-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2437

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36484.json · Exploit
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36893 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39504 · Security Note
• https://ubuntu.com/security/CVE-2024-38780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41087 · Security Note
• https://osv.dev/vulnerability/USN-7029-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41054 · Security Note
• https://ubuntu.com/security/CVE-2024-46737 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52751 · Vendor Advisory