What is CVE-2024-27017?

CVE-2024-27017 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 5.10.186 onward and patched in 5.10.227, 5.15.168, 6.1.112 and others. CVE-2024-27017 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-27017?

CVE-2024-27017 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Is there a patch available for CVE-2024-27017?

Yes, CVE-2024-27017 has been patched. Fixed versions include 5.10.227, 5.15.168, 6.1.112 and others. If you are running Linux kernel 5.10.186 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-27017 actively exploited?

CVE-2024-27017 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-27017

Medium

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set. Based on patch from Florian Westphal.

Package Linux Kernel

Published 2024-05-01

Last modified 2025-11-04

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

None

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected versions

Linux kernel versions 5.10.186, 5.15.119, 6.1.36, 6.3.10, 6.4 and later are affected. Fixed in 5.10.227, 5.15.168, 6.1.112, 6.6.53, 6.8.8, 6.9 and their respective stable series.

Affected from

≥ 5.10.186 ≥ 5.15.119 ≥ 6.1.36 ≥ 6.3.10 ≥ 6.4

Fixed in

✓ 5.10.227 5.10.x ✓ 5.15.168 5.15.x ✓ 6.1.112 6.1.x ✓ 6.6.53 6.6.x ✓ 6.8.8 6.8.x ✓ 6.9

References

11 total

Kernel Git
https://git.kernel.org/stable/c/29b359cf6d95fd60730533f7f10464e95bd17c73

Patch
Kernel Git
https://git.kernel.org/stable/c/721715655c72640567e8742567520c99801148ed

Patch
Kernel Git
https://git.kernel.org/stable/c/52735a010f37580b3a569a996f878fdd87425650
Kernel Git
https://git.kernel.org/stable/c/ce9fef54c5ec9912a0c9a47bac3195cc41b14679
Kernel Git
https://git.kernel.org/stable/c/f24d8abc2bb8cbf31ec713336e402eafa8f42f60

Showing 5 of 11 references View all on NVD

Details

CVE ID CVE-2024-27017

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-05-01

Modified 2025-11-04

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-27017?

CVE-2024-27017 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 5.10.186 onward and has been patched in 5.10.227, 5.15.168, 6.1.112 and others. CVE-2024-27017 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-27017?

CVE-2024-27017 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.
Is there a patch available for CVE-2024-27017?

Yes. CVE-2024-27017 has been patched. Fixed versions include 5.10.227, 5.15.168, 6.1.112 and others. If you are running Linux kernel 5.10.186 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-27017 actively exploited?

No. CVE-2024-27017 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.