CVE-2024-40999

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-40999", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-07-12T12:17:45.608Z", "datePublished": "2024-07-12T12:37:40.507Z", "dateUpdated": "2026-10-30T12:18:39.938Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:18:39.938Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ena: Add validation for completion descriptors consistency\n\nValidate that `first` flag is set only for the first\ndescriptor in multi-buffer packets.\nIn case of an invalid descriptor, a reset will occur.\nA new reset reason for RX data corruption has been added."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}, "scenarios": [{"lang": "en", "value": "AV:N - The vulnerable code is the NIC receive completion path (`ena_clean_rx_irq`/`ena_com_rx_pkt`), entered solely as a result of frames arriving from the network, and the multi-descriptor framing logic at fault is only exercised by large/scattered packets a remote peer generates at will. ENA is the standard NIC on internet-facing AWS EC2 instances, so the path is driven by remote, unauthenticated traffic.\nAC:L - No specific memory layout, victim state, or non-default configuration is required; the descriptor-framing path is exercised by ordinary multi-buffer RX traffic and the driver's cross-poll partial-packet state can be driven by sustained large-packet load. Per the rule to choose the higher severity when uncertain, the influenceable device-side framing condition is scored as Low rather than High.\nPR:N - Processing happens in NAPI/softirq context before any socket, filesystem, or authentication layer is reached, so no account or capability on the target is needed. A remote peer simply sends packets to the interface.\nUI:N - The RX completion path runs automatically whenever the interface is up and receiving traffic. No victim action of any kind is required.\nS:U - The mis-framed descriptors corrupt driver state and skb contents within the same kernel/host security authority. No VM, IOMMU, or sandbox boundary is crossed.\nC:H - Merged descriptor chains splice RX buffers belonging to unrelated packets into a single skb delivered to the network stack, and the accumulated `buf_offset`/`buf_len` can describe fragments extending past the real allocation, giving out-of-bounds reads. Stale page pointers reaching `skb_add_rx_frag()` constitute a use-after-free, which is scored High for confidentiality.\nI:H - The unguarded fragment loop can `page_ref_inc()` and `skb_add_rx_frag()` a stale or already-released page and DMA-unmap an already-unmapped buffer, producing double-free/UAF heap-corruption primitives; corrupted packet data is also injected into the stack. Memory corruption of this kind is exploitable for control-flow hijack and is scored High.\nA:H - A NULL `rx_info->page` reaching `page_ref_inc()`/`skb_add_rx_frag()` is an immediate kernel oops, and even the benign outcome is RX ring desync that stalls buffer replenishment and forces a full device reset, dropping network connectivity. Any kernel crash or hang is scored High."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/amazon/ena/ena_eth_com.c", "drivers/net/ethernet/amazon/ena/ena_netdev.c", "drivers/net/ethernet/amazon/ena/ena_regs_defs.h"], "versions": [{"version": "1738cd3ed342294360d6a74d4e58800004bff854", "lessThan": "4f163a8035e76e835a984cf548b3e6922cfe145f", "status": "affected", "versionType": "git"}, {"version": "1738cd3ed342294360d6a74d4e58800004bff854", "lessThan": "edb9a302cc9386142beffe5d9bbe4bfd36999eee", "status": "affected", "versionType": "git"}, {"version": "1738cd3ed342294360d6a74d4e58800004bff854", "lessThan": "42146ee5286f16f1674a84f7c274dcca65c6ff2e", "status": "affected", "versionType": "git"}, {"version": "1738cd3ed342294360d6a74d4e58800004bff854", "lessThan": "b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/amazon/ena/ena_eth_com.c", "drivers/net/ethernet/amazon/ena/ena_netdev.c", "drivers/net/ethernet/amazon/ena/ena_regs_defs.h"], "versions": [{"version": "4.9", "status": "affected"}, {"version": "0", "lessThan": "4.9", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9.7", "lessThanOrEqual": "6.9.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.10", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "6.9.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "6.10"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/4f163a8035e76e835a984cf548b3e6922cfe145f"}, {"url": "https://git.kernel.org/stable/c/edb9a302cc9386142beffe5d9bbe4bfd36999eee"}, {"url": "https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e"}, {"url": "https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7"}], "title": "net: ena: Add validation for completion descriptors consistency", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:39:56.158Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-40999", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T17:01:22.448911Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:34:19.348Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:39:56.158Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-40999", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T17:01:22.448911Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:21.988Z"}}], "cna": {"title": "net: ena: Add validation for completion descriptors consistency", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:N - The vulnerable code is the NIC receive completion path (`ena_clean_rx_irq`/`ena_com_rx_pkt`), entered solely as a result of frames arriving from the network, and the multi-descriptor framing logic at fault is only exercised by large/scattered packets a remote peer generates at will. ENA is the standard NIC on internet-facing AWS EC2 instances, so the path is driven by remote, unauthenticated traffic.\nAC:L - No specific memory layout, victim state, or non-default configuration is required; the descriptor-framing path is exercised by ordinary multi-buffer RX traffic and the driver's cross-poll partial-packet state can be driven by sustained large-packet load. Per the rule to choose the higher severity when uncertain, the influenceable device-side framing condition is scored as Low rather than High.\nPR:N - Processing happens in NAPI/softirq context before any socket, filesystem, or authentication layer is reached, so no account or capability on the target is needed. A remote peer simply sends packets to the interface.\nUI:N - The RX completion path runs automatically whenever the interface is up and receiving traffic. No victim action of any kind is required.\nS:U - The mis-framed descriptors corrupt driver state and skb contents within the same kernel/host security authority. No VM, IOMMU, or sandbox boundary is crossed.\nC:H - Merged descriptor chains splice RX buffers belonging to unrelated packets into a single skb delivered to the network stack, and the accumulated `buf_offset`/`buf_len` can describe fragments extending past the real allocation, giving out-of-bounds reads. Stale page pointers reaching `skb_add_rx_frag()` constitute a use-after-free, which is scored High for confidentiality.\nI:H - The unguarded fragment loop can `page_ref_inc()` and `skb_add_rx_frag()` a stale or already-released page and DMA-unmap an already-unmapped buffer, producing double-free/UAF heap-corruption primitives; corrupted packet data is also injected into the stack. Memory corruption of this kind is exploitable for control-flow hijack and is scored High.\nA:H - A NULL `rx_info->page` reaching `page_ref_inc()`/`skb_add_rx_frag()` is an immediate kernel oops, and even the benign outcome is RX ring desync that stalls buffer replenishment and forces a full device reset, dropping network connectivity. Any kernel crash or hang is scored High."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1738cd3ed342294360d6a74d4e58800004bff854", "lessThan": "4f163a8035e76e835a984cf548b3e6922cfe145f", "versionType": "git"}, {"status": "affected", "version": "1738cd3ed342294360d6a74d4e58800004bff854", "lessThan": "edb9a302cc9386142beffe5d9bbe4bfd36999eee", "versionType": "git"}, {"status": "affected", "version": "1738cd3ed342294360d6a74d4e58800004bff854", "lessThan": "42146ee5286f16f1674a84f7c274dcca65c6ff2e", "versionType": "git"}, {"status": "affected", "version": "1738cd3ed342294360d6a74d4e58800004bff854", "lessThan": "b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/amazon/ena/ena_eth_com.c", "drivers/net/ethernet/amazon/ena/ena_netdev.c", "drivers/net/ethernet/amazon/ena/ena_regs_defs.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.9"}, {"status": "unaffected", "version": "0", "lessThan": "4.9", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.191", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.160", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.9.7", "versionType": "semver", "lessThanOrEqual": "6.9.*"}, {"status": "unaffected", "version": "6.10", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/amazon/ena/ena_eth_com.c", "drivers/net/ethernet/amazon/ena/ena_netdev.c", "drivers/net/ethernet/amazon/ena/ena_regs_defs.h"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/4f163a8035e76e835a984cf548b3e6922cfe145f"}, {"url": "https://git.kernel.org/stable/c/edb9a302cc9386142beffe5d9bbe4bfd36999eee"}, {"url": "https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e"}, {"url": "https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ena: Add validation for completion descriptors consistency\n\nValidate that `first` flag is set only for the first\ndescriptor in multi-buffer packets.\nIn case of an invalid descriptor, a reset will occur.\nA new reset reason for RX data corruption has been added."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.191", "versionStartIncluding": "4.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.160", "versionStartIncluding": "4.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.9.7", "versionStartIncluding": "4.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.10", "versionStartIncluding": "4.9"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:18:39.938Z"}}}, "cveMetadata": {"cveId": "CVE-2024-40999", "state": "PUBLISHED", "dateUpdated": "2026-10-30T12:18:39.938Z", "dateReserved": "2024-07-12T12:17:45.608Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-07-12T12:37:40.507Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/amazon/ena/ena_eth_com.c", "drivers/net/ethernet/amazon/ena/ena_netdev.c", "drivers/net/ethernet/amazon/ena/ena_regs_defs.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "4f163a8035e76e835a984cf548b3e6922cfe145f", "status": "affected", "version": "1738cd3ed342294360d6a74d4e58800004bff854", "versionType": "git"}, {"lessThan": "edb9a302cc9386142beffe5d9bbe4bfd36999eee", "status": "affected", "version": "1738cd3ed342294360d6a74d4e58800004bff854", "versionType": "git"}, {"lessThan": "42146ee5286f16f1674a84f7c274dcca65c6ff2e", "status": "affected", "version": "1738cd3ed342294360d6a74d4e58800004bff854", "versionType": "git"}, {"lessThan": "b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7", "status": "affected", "version": "1738cd3ed342294360d6a74d4e58800004bff854", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/amazon/ena/ena_eth_com.c", "drivers/net/ethernet/amazon/ena/ena_netdev.c", "drivers/net/ethernet/amazon/ena/ena_regs_defs.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.9"}, {"lessThan": "4.9", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.9.*", "status": "unaffected", "version": "6.9.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.10", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "DF088BC2-62DA-44BB-A35B-1F5BD0263AC6", "versionEndExcluding": "6.9.7", "versionStartIncluding": "4.9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ena: Add validation for completion descriptors consistency\n\nValidate that `first` flag is set only for the first\ndescriptor in multi-buffer packets.\nIn case of an invalid descriptor, a reset will occur.\nA new reset reason for RX data corruption has been added."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: net: ena: agregue validaci\u00f3n para la coherencia de los descriptores de finalizaci\u00f3n. Valide que el indicador \"primer\" est\u00e9 configurado solo para el primer descriptor en paquetes de m\u00faltiples b\u00fafer. En caso de un descriptor no v\u00e1lido, se producir\u00e1 un reinicio. Se ha agregado un nuevo motivo de reinicio para la corrupci\u00f3n de datos RX."}], "id": "CVE-2024-40999", "lastModified": "2026-10-30T13:17:30.247", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-40999", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-09-10T17:01:22.448911Z", "version": "2.0.3"}}]}, "published": "2024-07-12T13:15:20.920", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4f163a8035e76e835a984cf548b3e6922cfe145f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/edb9a302cc9386142beffe5d9bbe4bfd36999eee"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: net: ena: Add validation for completion descriptors consistency", "id": "2297583", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297583"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-99", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: ena: Add validation for completion descriptors consistency\nValidate that `first` flag is set only for the first\ndescriptor in multi-buffer packets.\nIn case of an invalid descriptor, a reset will occur.\nA new reset reason for RX data corruption has been added."], "name": "CVE-2024-40999", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-07-12T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-40999\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-40999\nhttps://lore.kernel.org/linux-cve-announce/2024071252-CVE-2024-40999-8c1b@gregkh/T"], "threat_severity": "Low"}

{"created": "2025-07-12T22:16:27.127857+00:00", "updated": "2025-07-12T22:16:27.127943+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}