CVE-2024-26677

MediumCVSS 5.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix delayed ACKs to not set the reference serial number

Fix the construction of delayed ACKs to not set the reference serial number as they can't be used as an RTT reference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 17926a79320afa9b95df6b977b40cca6d8713cea, < 7a72f92f42b728f0d45efa081e78d1ebaf7ac725; >= 17926a79320afa9b95df6b977b40cca6d8713cea, < 200cb50b9e154434470c8969d32474d38475acc2; >= 17926a79320afa9b95df6b977b40cca6d8713cea, < 63719f490e6a89896e9a463d2b45e8203eab23ae; >= 17926a79320afa9b95df6b977b40cca6d8713cea, < e7870cf13d20f56bfc19f9c3e89707c69cf104ef
LinuxLinux2.6.22

References

Timeline

Published
Apr 2, 2024
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-266785.5In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section TCVE-2024-266795.5In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() iCVE-2024-26686.5A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as critical. This vulnerability affects unknown codeCVE-2024-266805.5In the Linux kernel, the following vulnerability has been resolved: net: atlantic: Fix DMA mapping for PTP hwts ring Function aq_ring_hwtsCVE-2024-266815.5In the Linux kernel, the following vulnerability has been resolved: netdevsim: avoid potential loop in nsim_dev_trap_report_work() Many syCVE-2024-266825.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: improve CSA/ECSA connection refusal As mentioned in thCVE-2024-266835.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently adCVE-2024-266845.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels CVE-2024-266855.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in end_buffer_async_write According to a syzCVE-2024-266865.5In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/childrCVE-2024-266875.5In the Linux kernel, the following vulnerability has been resolved: xen/events: close evtchn after mapping cleanup shutdown_pirq and startCVE-2024-266885.5In the Linux kernel, the following vulnerability has been resolved: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super When c
CVE-2024-26677: Medium severity, CVSS 5.5 | Vulnix