{"id":"CVE-2024-27396","revision":"2eb72db730e5497faf35add51475d5ed","records":[{"revision":"2eb72db730e5497faf35add51475d5ed","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-27396","aliases":[],"title":"net: gtp: Fix Use-After-Free in gtp_dellink","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gtp: Fix Use-After-Free in gtp_dellink\n\nSince call_rcu, which is called in the hlist_for_each_entry_rcu traversal\nof gtp_dellink, is not part of the RCU read critical section, it\nis possible that the RCU grace period will pass during the traversal and\nthe key will be free.\n\nTo prevent this, it should be changed to hlist_for_each_entry_safe.","state":0,"publishedAt":"2024-05-09T16:37:18.867+00:00","modifiedAt":"2026-10-15T00:40:15.12+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/gtp.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"043a283d24f40fea4c8a8d06b0e2694c8e372200\",\n                            \"lessThan\": \"07b20d0a3dc13fb1adff10b60021a4924498da58\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c185e1d6e2752a4b656c3ca878c525fa11f55757\",\n                            \"lessThan\": \"718df1bc226c383dd803397d7f5d95557eb81ac7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\",\n                            \"lessThan\": \"0caff3e6390f840666b8dc1ecebf985c2ef3f1dd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\",\n                            \"lessThan\": \"2e74b3fd6bf542349758f283676dff3660327c07\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\",\n                            \"lessThan\": \"25a1c2d4b1fcf938356a9688a96a6456abd44b29\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\",\n                            \"lessThan\": \"2aacd4de45477582993f8a8abb9505a06426bfb6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\",\n                            \"lessThan\": \"cd957d1716ec979d8f5bf38fc659aeb9fdaa2474\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"94dc550a5062030569d4aa76e10e50c8fc001930\",\n                            \"lessThan\": \"f2a904107ee2b647bb7794a1a82b67740d7c8a64\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a29c4303930bc0c25ae6a4f365dcdef71447b4ea\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4.19.93\",\n                            \"lessThan\": \"4.19.313\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.8\",\n                            \"lessThan\": \"5.4.275\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.14.162\",\n                            \"lessThan\": \"4.15\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/gtp.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.5\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.313\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.275\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.216\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.158\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.90\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.30\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.8.9\",\n                            \"lessThanOrEqual\": \"6.8.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.9\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/07b20d0a3dc13fb1adff10b60021a4924498da58","https://git.kernel.org/stable/c/718df1bc226c383dd803397d7f5d95557eb81ac7","https://git.kernel.org/stable/c/0caff3e6390f840666b8dc1ecebf985c2ef3f1dd","https://git.kernel.org/stable/c/2e74b3fd6bf542349758f283676dff3660327c07","https://git.kernel.org/stable/c/25a1c2d4b1fcf938356a9688a96a6456abd44b29","https://git.kernel.org/stable/c/2aacd4de45477582993f8a8abb9505a06426bfb6","https://git.kernel.org/stable/c/cd957d1716ec979d8f5bf38fc659aeb9fdaa2474","https://git.kernel.org/stable/c/f2a904107ee2b647bb7794a1a82b67740d7c8a64"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-27396","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-27396","identifiers":["CVE-2024-27396"]},"retained":false,"historicalAffected":[]}],"coverage":[]}