---
id: 4662
title: "[CVE-2024-27394] Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394)"
cve: CVE-2024-27394
source_domain: theori.io
source_url: "https://theori.io/blog/deep-dive-into-rcu-race-condition-analysis-of-tcp-ao-uaf-cve-2024-27394"
published_at: "2024-09-03 15:00"
tags: ["use-after-free", "linux-kernel", "race-condition", "cve-2024-27394", "rcu", "exprace", "tcp-ao"]
phying_url: "https://phying.com/item/4662"
lang: en
---

# [CVE-2024-27394] Deep Dive into RCU Race Condition: Analysis of TCP-AO UAF (CVE-2024–27394)

## Summary

A deep dive into CVE-2024-27394, a TCP-AO use-after-free caused by incorrect RCU API usage in the Linux kernel, covering RCU internals, the patch, and the ExpRace technique for reliable triggering.

## Intelligence Metadata

- **Sources:** theori.io
- **CVE:** CVE-2024-27394
- **Published:** 2024-09-03 15:00
- **Original:** https://theori.io/blog/deep-dive-into-rcu-race-condition-analysis-of-tcp-ao-uaf-cve-2024-27394
- **Phying News:** https://phying.com/item/4662