ThreatCluster

Kernel Deadlock Vulnerabilities CVE-2024-0639 and CVE-2024-0641 Identified

First seen 18 Feb 2026, 11:17 UTC Api.Msrc.Microsoft 48

Article Content

Browse articles
ThreatCluster

Two kernel vulnerabilities, CVE-2024-0639 and CVE-2024-0641, were published on January 17, 2024. CVE-2024-0639 involves a potential deadlock on &net->sctp.addr_wq_lock, while CVE-2024-0641 relates to a deadlock in tipc_crypto_key_revoke, both leading to denial of service. Affected systems include those utilizing the Microsoft kernel.

Timeline

2024-01-17
CVE-2024-0639 and CVE-2024-0641 published
2026-02-18
Articles published detailing the vulnerabilities