Skip to main content
VulnerabilityPublished Updated

CVE-2024-27010: Linux kernel · net/sched: Fix mirred deadlock on device recursion

Affects Linux kernelSource GCVE Database

0
Compare

Not known to be exploited.

Data as of 30 Oct 2026, 16:33 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 1 May 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

AI-suggested

A fix has been implemented in the Linux kernel to address this deadlock by adding a CPU owner field to the Qdisc structure to detect recursion and drop packets to break the loop. Users should apply the updated kernel version containing this fix once available. No alternative mitigations are described.

Description

CVE-2024-27010 is a vulnerability in the Linux kernel's network scheduler (net/sched) subsystem that causes a deadlock when the mirred action is used on a classful egress qdisc and a packet is mirrored or redirected to the same device, leading to recursive locking. This deadlock occurs because the same lock is attempted to be acquired twice by the same task, resulting in a kernel warning and potential system hang. The issue is fixed by adding a CPU owner field to the qdisc structure to detect recursion and drop packets to break the loop.

References

Community reviews

Loading reviews…