Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-42110

17
FAUCET Score

CVE-2024-42110 is a medium-severity vulnerability in the Linux kernel's ntb_netdev module, affecting versions using idxd (DSA) dmaengine. It stems from an incorrect network packet reception function call (__netif_rx instead of netif_rx) within a non-interrupt context, leading to a kernel bug (BUG: using smp_processor_id() in preemptible code). This local vulnerability (AV:L) requires low privileges (PR:L) and low attack complexity (AC:L), potentially causing a denial of service (A:H) due to system instability. There is no evidence of active exploitation, public exploit code, or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.9, < 6.1.98CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.39CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.9.9CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.10CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
6.10CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.24%
Probability of exploitation in next 30 days
EPSS Percentile
15.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0024 is in the 65th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-427.33.1.el9_4
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel

Vendor Advisories (5)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
redhatCVE-2024-42110Moderate

kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()

Jul 30, 2024
microsoft2024-Jul/CVE-2024-42110Moderate

net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()

Jul 9, 2024

References

git.kernel.org / stable/c/4b3b6c7efee69f077b86ef7f088fb96768e46e1f
Patch
git.kernel.org / stable/c/858ae09f03677a4ab907a15516893bc2cc79d4c3
Patch
git.kernel.org / stable/c/e15a5d821e5192a3769d846079bc9aa380139baf
Patch
git.kernel.org / stable/c/e3af5b14e7632bf12058533d69055393e2d126c9
Patch
lists.debian.org / debian-lts-announce/2025/01/msg00001.html