CVE-2024-0641 Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Kernel Deadlock Vulnerabilities CVE-2024-0639 and CVE-2024-0641 Identified Two kernel vulnerabilities, CVE-2024-0639 and CVE-2024-0641, were published on January 17, 2024. CVE-2024-0639 involves a potential deadlock on &net->sctp.addr_wq_lock, while CVE-2024-0641 relates to a deadlock in tipc_crypto_key_revoke, both leading to denial of service. Affected systems include those utilizing the Microsoft kernel. 2 sources 48