CVE-2024-27005

CVE-2024-27005 is a race condition vulnerability in the Linux kernel's interconnect subsystem, specifically affecting the handling of the icc_node::req_list. This flaw allows for concurrent modification and iteration of the request list due to inadequate mutex protection, potentially leading to use-after-free or other memory corruption issues. Rated Medium (CVSS 6.3), an attacker with local low-privileged access could exploit this with high attack complexity to achieve high confidentiality and availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.