PT-2024-6086 · Linux+5 · Linux Kernel+5

Robert Morris · Published 2024-01-29 · Updated 2026-05-26 · CVE-2024-27407

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a buffer overflow in the mi enum attr() function of the fs/ntfs3 component in the Linux kernel. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-06991

CVE-2024-27407

DLA-4076-1

LSN-0115-1

OESA-2024-1680

OESA-2024-1681

OESA-2024-1682

OPENSUSE-SU-2024_4314-1

OPENSUSE-SU-2024_4316-1

SUSE-SU-2024:4314-1

SUSE-SU-2024:4316-1

SUSE-SU-2024:4318-1

SUSE-SU-2024:4387-1

SUSE-SU-2025:20163-1

SUSE-SU-2025:20164-1

SUSE-SU-2025:20246-1

SUSE-SU-2025:20247-1

USN-7726-1

USN-7726-2

USN-7726-3

USN-7726-4

USN-7726-5

USN-7776-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1431

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27407.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-27407 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38371 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36006 · Security Note
• https://ubuntu.com/security/CVE-2025-38226 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35848 · Security Note
• https://ubuntu.com/security/CVE-2025-38332 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35886 · Security Note
• https://ubuntu.com/security/CVE-2025-38108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26961 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:4316-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52854 · Security Note
• https://ubuntu.com/security/CVE-2025-38245 · Vendor Advisory
• https://ubuntu.com/security/notices/LSN-0115-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1680 · Vendor Advisory