CVE-2024-41081
A critical race condition in the Linux kernel’s network stack can corrupt internal data structures, potentially allowing attackers to crash the system or take control. The flaw occurs when the kernel processes network packets while a softirq interrupts, leading to corrupted dst_cache data. The issue has been fixed in recent kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel, particularly versions before the patch (e.g., 6.10 and earlier). Typical users are system administrators and anyone running an unpatched Linux kernel.
Real-world impact
An attacker could cause a denial of service or potentially gain elevated privileges by corrupting kernel data structures.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited remotely with no authentication or user interaction, and it can lead to full compromise of confidentiality, integrity, and availability.
What to do about it
- 01Verify your current kernel version.
- 02Install a kernel version that includes the fix (e.g., 6.10 or newer).
- 03Reboot into the updated kernel.
NVD-referenced vendor advisory
Timeline
- Jul 29, 2024 · Jul 29, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/522c3336c2025818fa…patch
- git.kernel.org/stable/c/7435bd2f84a25aba60…patch
- git.kernel.org/stable/c/96103371091c6476eb…patch
- git.kernel.org/stable/c/9f9c79d8e527d867e0…patch
- git.kernel.org/stable/c/a0cafb7b0b94d18e48…patch
- git.kernel.org/stable/c/b4eb25a3d70df925a9…patch
- git.kernel.org/stable/c/cf28ff8e4c02e1ffa8…patch
- git.kernel.org/stable/c/feac2391e26b086f73…patch
- lists.debian.org/debian-lts-announce/2025/01…