{"id":"CVE-2024-0641","aliases":[],"cve":{"records":[{"id":"CVE-2024-0641","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2024-01-17T09:52:20.542Z","published":"2024-01-17T15:15:45.272Z","modified":"2026-11-05T11:39:17.264Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-05T11:39:17.264Z"},{"name":"CVE","role":"ADP","organizationId":"af854a3a-2127-422b-91ae-364da2661108","modified":"2024-08-01T18:11:35.688Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2025-06-17T21:19:19.100Z"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2024-0641","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258757","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://github.com/torvalds/linux/commit/08e50cf071847323414df0835109b6f3560d44f5","tags":[],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2024-0641","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258757","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://github.com/torvalds/linux/commit/08e50cf071847323414df0835109b6f3560d44f5","tags":["x_transferred"],"source":"CVE"}],"weaknesses":[{"id":"CWE-833","description":"Deadlock","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2024-01-24T19:23:25.846465Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke","titleSource":"redhat","descriptionSource":"redhat","description":"A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.","score":5.5,"severity":"medium","published":"2024-01-17T15:15:45.272Z","modified":"2026-11-05T11:39:17.264Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"","name":"kernel","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"6.6-rc5","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/o:redhat:rhel_els:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"}],"remediation":[{"text":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"}],"references":["https://access.redhat.com/security/cve/CVE-2024-0641","https://bugzilla.redhat.com/show_bug.cgi?id=2258757","https://github.com/torvalds/linux/commit/08e50cf071847323414df0835109b6f3560d44f5"],"sources":[{"name":"CVE","id":"CVE-2024-0641","modified":"2026-11-05T11:39:17.264Z","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":5.5}],"sourceAffected":[],"observedAt":"2026-11-05T12:46:27.091Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:35:33.875Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-05T14:15:34.675Z","attemptedAt":"2026-11-05T14:15:34.675Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-05T14:15:35.286Z","attemptedAt":"2026-11-05T14:15:35.286Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-05T14:15:35.654Z","attemptedAt":"2026-11-05T14:15:35.654Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-05T14:15:34.749Z","attemptedAt":"2026-11-05T14:15:34.749Z"}],"evidence":[{"source":"NVD","id":"CVE-2024-0641","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0641","modified":"2026-11-05T12:17:42.567","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-05T14:15:34.675Z"},{"source":"NVD","id":"CVE-2024-0641","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0641","modified":"2026-11-05T12:17:42.567","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-05T14:15:34.675Z"},{"source":"FIRST EPSS","id":"CVE-2024-0641","url":"https://www.first.org/epss/","probability":0.00168,"percentile":0.06182,"date":"2026-11-04","checkedAt":"2026-11-05T14:15:34.749Z"},{"source":"GitHub Advisory Database","id":"GHSA-x4v6-w9v4-p32j","url":"https://github.com/advisories/GHSA-x4v6-w9v4-p32j","modified":"2024-02-02T05:08:02Z","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-05T14:15:35.286Z"},{"source":"ENISA EUVD","id":"EUVD-2024-16433","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16433","modified":"Nov 5, 2026, 11:39:17 AM","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-05T14:15:35.654Z"}],"aiSummary":{"text":"A denial of service vulnerability in the Linux kernel's TIPC subsystem, affecting versions less than 6.6-rc5, allows local users to trigger a deadlock and potentially crash the system. The flaw is in tipc_crypto_key_revoke in net/tipc/crypto.c. Local user privileges are required to exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-05T12:56:13.223Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2024-0641"}]}}