Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-47739

17
FAUCET Score

CVE-2024-47739 is a medium-severity vulnerability in the Linux kernel's padata component, affecting its serialization process. The flaw arises when more than 2^32 padata objects are submitted, causing an integer overflow in the sequence number (seq_nr) that leads to incorrect sorting and a subsequent deadlock. This issue has been addressed by implementing unsigned integer wrap-around for proper sorting. The vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low attack complexity, requiring low privileges, and resulting in high availability impact. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor are there any public exploit modules available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with a large percentage of reported vulnerabilities.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.4, < 5.10.227CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.168CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.113CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.54CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.10.13CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.23%
Probability of exploitation in next 30 days
EPSS Percentile
13.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0023 is in the 60th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (23)

9001patch availablevia llm_extracted
View patch
codesyspatch availablevia llm_extracted
View patch
esphomepatch availablevia llm_extracted
View patch
gatsbyjspatch availablevia llm_extracted
View patch
joinmastodonpatch availablevia llm_extracted
View patch
mariadbpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 19672-17086Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: 17156-17086Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: 17603-17084Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: 17610-17084Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.51.1-5 on Azure Linux 3.0Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: 17123-16823Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0Fixed in: 5.15.173.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.56.1-5 on Azure Linux 3.0Fixed in: 6.6.56.1-5
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-570.12.1.el9_6
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel

Vendor Advisories (10)

codesysllm-codesys-fe85e88fbae25bb9CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
esphomellm-esphome-ed450ce9fd6a7380CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
mariadbllm-mariadb-7e20cc2309665f3eCRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
gatsbyjsllm-gatsbyjs-d2a2db116f1afcf5CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
9001llm-9001-fecf0327d92708b9CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
joinmastodonllm-joinmastodon-9b2d3b3c900c6299CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
microsoft2024-Dec/CVE-2024-47739

CVE-2024-47739

Dec 10, 2024
microsoft2024-Nov/CVE-2024-47739

CVE-2024-47739

Nov 12, 2024
redhatCVE-2024-47739Moderate

kernel: padata: use integer wrap around to prevent deadlock on seq_nr overflow

Oct 21, 2024
microsoft2024-Oct/CVE-2024-47739Moderate

padata: use integer wrap around to prevent deadlock on seq_nr overflow

Oct 8, 2024

References

git.kernel.org / stable/c/1b8cf11b3ca593a8802a51802cd0c28c38501428
Patch
git.kernel.org / stable/c/1bd712de96ad7167fe0d608e706cd60587579f16
Patch
git.kernel.org / stable/c/46c4079460f4dcaf445860679558eedef4e1bc91
Patch
git.kernel.org / stable/c/72164d5b648951684b1a593996b37a6083c61d7d
Patch
git.kernel.org / stable/c/9a22b2812393d93d84358a760c347c21939029a6
Patch
git.kernel.org / stable/c/9e279e6c1f012b82628b89e1b9c65dbefa8ca25a
Patch
git.kernel.org / stable/c/ab205e1c3846326f162180e56825b4ba38ce9c30
Patch
lists.debian.org / debian-lts-announce/2025/01/msg00001.html
lists.debian.org / debian-lts-announce/2025/03/msg00002.html