CVE-2024-26677

rxrpc: Fix delayed ACKs to not set the reference serial number

References

Notes

 carnil> Introduced in 17926a79320a ("[AF_RXRPC]: Provide secure RxRPC sockets for use
 carnil> by userspace and kernel both"). Vulnerable versions: 2.6.22-rc1.

Bugs

Status

Branch Status
4.19-buster-security needed
4.19-upstream-stable needed
5.10-bullseye-security needed
5.10-upstream-stable needed
6.1-bookworm-security needed
6.1-upstream-stable needed
6.6-upstream-stable released (6.6.17) [200cb50b9e154434470c8969d32474d38475acc2]
6.8-upstream-stable N/A "Fixed before branching point"
sid released (6.7.7-1)
upstream released (6.8-rc4) [e7870cf13d20f56bfc19f9c3e89707c69cf104ef]