CVE-2024-26677
mediumIn the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix delayed ACKs to not set the reference serial number Fix the construction of de…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix delayed ACKs to not set the reference serial number Fix the construction of delayed ACKs to not set the reference serial number as they can't be used as an RTT reference.
CVSS
5.5
5.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-04-02 07:15
Modified: 2026-10-30 13:17
NVD status: Modified
Last synced 3 days ago
Verified against the source API 2026-10-30 13:38 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥2.6.22 <6.6.17, ≥6.7 <6.7.5, 6.8
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2
Patch / mitigation: https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae
Patch / mitigation: https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef
Patch / mitigation: https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2
Patch / mitigation: https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae
Patch / mitigation: https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef
References
- https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/7a72f92f42b728f0d45efa081e78d1ebaf7ac725 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2 af854a3a-2127-422b-91ae-364da2661108
- https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae af854a3a-2127-422b-91ae-364da2661108
- https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-10-30 13:38 UTC · record ↗