CVE-2024-26677

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2024-04-02 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix delayed ACKs to not set the reference serial number Fix the construction of delayed ACKs to not set the reference serial number as they can't be used as an RTT reference.

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Linux Linux 17926a79320afa9b95df6b977b40cca6d8713cea < 7a72f92f42b728f0d45efa081e78d1ebaf7ac725
Linux Linux 17926a79320afa9b95df6b977b40cca6d8713cea < 200cb50b9e154434470c8969d32474d38475acc2
Linux Linux 17926a79320afa9b95df6b977b40cca6d8713cea < 63719f490e6a89896e9a463d2b45e8203eab23ae
Linux Linux 17926a79320afa9b95df6b977b40cca6d8713cea < e7870cf13d20f56bfc19f9c3e89707c69cf104ef
Linux Linux 2.6.22
linux linux_kernel 2.6.22 – 6.6.17
linux linux_kernel 6.8
linux linux_kernel 6.8
linux linux_kernel 6.8

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.24%
Raw Score 0.002410
Percentile 15.3%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00241
2026-10-29
0.00241

Intelligence Sources

mitre ref →
nvd ref →