Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0024 14.9 —
AFFECTED Product Versions Fixed Linux a3c90f7a2323b331ae816d5b0633e68148e25d04 – — Linux 4.16 – 5.15.150
TIMELINE Feb 25 Reserved by Linux May 17 Published (CNA: Linux) Aug 4 RESCORED — CVE-2024-27403 (Linux). CVSS 7.8 → 5.5 (NVD).
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flow_offload_add() fails, error path releases dst twice, leading to a refcount underflow.
| Date | Event | Detail |
|---|---|---|
| February 25, 2024 | Reserved | Reserved by Linux |
| May 17, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-27403 (Linux). CVSS 7.8 → 5.5 (NVD). |
Authoritative record: CVE-2024-27403 at cve.org
Vendors: linux
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-27403 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.