{"id":"CVE-2024-26677","title":"rxrpc: Fix delayed ACKs to not set the reference serial number","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix delayed ACKs to not set the reference serial number\n\nFix the construction of delayed ACKs to not set the reference serial number\nas they can't be used as an …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 7a72f92f42b728f0d45efa081e78d1ebaf7ac725","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 200cb50b9e154434470c8969d32474d38475acc2","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 63719f490e6a89896e9a463d2b45e8203eab23ae","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < e7870cf13d20f56bfc19f9c3e89707c69cf104ef","Linux 2.6.22"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-04-02T14:58:11.213319Z"},"published":"2024-04-02","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:17:47.694Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-26677","references":[{"url":"https://git.kernel.org/stable/c/7a72f92f42b728f0d45efa081e78d1ebaf7ac725"},{"url":"https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2"},{"url":"https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae"},{"url":"https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef"}],"tags":["cve.org"],"epss":0.00241,"epssPercentile":0.15319,"ingestedAt":"2026-11-03T12:44:28.783Z","slug":"CVE-2024-26677","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix delayed ACKs to not set the reference serial number\n\nFix the construction of delayed ACKs to not set the reference serial number\nas they can't be used as an RTT reference.\n\n## Affected\n\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 7a72f92f42b728f0d45efa081e78d1ebaf7ac725`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 200cb50b9e154434470c8969d32474d38475acc2`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 63719f490e6a89896e9a463d2b45e8203eab23ae`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < e7870cf13d20f56bfc19f9c3e89707c69cf104ef`\n- `Linux 2.6.22`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}