Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H H H 7.8 .0063 47.6 —
AFFECTED Product Versions Fixed Linux 8459d61fbf24967839a70235165673148c7c7f17 – — Linux 6.12 – 5.15.174
TIMELINE Nov 19 Reserved by Linux Dec 27 Published (CNA: Linux) Aug 4 RESCORED — CVE-2024-53206 (Linux). CVSS 9.8 → 7.8 (NVD).
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler(). Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout). Let's pass oreq to reqsk_put().
| Date | Event | Detail |
|---|---|---|
| November 19, 2024 | Reserved | Reserved by Linux |
| December 27, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-53206 (Linux). CVSS 9.8 → 7.8 (NVD). |
Authoritative record: CVE-2024-53206 at cve.org
Vendors: linux
Weaknesses: CWE-416
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-53206 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.