CVE-2024-46681

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 36/100
Published: 2024-09-13 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpus_read_lock() in pg_net_init() I have seen the WARN_ON(smp_processor_id() != cpu) firing in pktgen_thread_worker() during tests. We must use cpus_read_lock()/cpus_read_unlock() around the for_each_online_cpu(cpu) loop. While we are at it use WARN_ON_ONCE() to avoid a possible syslog flood.

Affected Software (11)

VendorProductVersion
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1b4fe364b561b952dd7beeba7f7616f9a419b83a
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7eed5b3115ce9e057bf64c3f6be9ea72f8298e4e
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5f5f7366dda8ae870e8305d6e7b3c0c2686cd2cf
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 979b581e4c69257acab1af415ddad6b2d78a2fa5
Linux Linux 2.6.12
linux linux_kernel 2.6.12 – 6.10.8
linux linux_kernel 6.11
linux linux_kernel 6.11
linux linux_kernel 6.11
linux linux_kernel 6.11
linux linux_kernel 6.11

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.28%
Raw Score 0.002780
Percentile 20.2%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00278
2026-10-29
0.00278

Intelligence Sources

mitre ref →
nvd ref →