# CVE-2024-7409

## Summary

- **CVE ID:** CVE-2024-7409
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** CWE-662
- **Published:** Aug 5, 2024
- **Last Modified:** Sep 1, 2026

## Description

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

## Affected Products

- Unknown product (7.2.0)
- Unknown product (8.2.0)
- Unknown product (9.0.0)
- Red Hat — Red Hat Enterprise Linux 8 (8100020240905091210.489197e6)
- Red Hat — Red Hat Enterprise Linux 9 (17:9.0.0-10.el9_5)
- Red Hat — Red Hat Enterprise Linux 9.2 Extended Update Support (17:7.2.0-14.el9_2.14)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (17:8.2.0-11.el9_4.8)
- Red Hat — Red Hat OpenShift Container Platform 4.13 (413.92.202411212100-0)
- Red Hat — Red Hat OpenShift Container Platform 4.13 (413.92.202409180051-0)
- Red Hat — Red Hat OpenShift Container Platform 4.14 (414.92.202411130444-0)
- Red Hat — Red Hat OpenShift Container Platform 4.15 (415.92.202409162258-0)
- Red Hat — Red Hat OpenShift Container Platform 4.15 (415.92.202411050056-0)
- Red Hat — Red Hat OpenShift Container Platform 4.16 (416.94.202411261619-0)
- Red Hat — Red Hat OpenShift Container Platform 4.17 (417.94.202411261220-0)

## References

- [CNA](https://access.redhat.com/errata/RHSA-2024:10518)
- [CNA](https://access.redhat.com/errata/RHSA-2024:10528)
- [CNA](https://access.redhat.com/errata/RHSA-2024:10813)
- [CNA](https://access.redhat.com/errata/RHSA-2024:6811)
- [CNA](https://access.redhat.com/errata/RHSA-2024:6818)
- [CNA](https://access.redhat.com/errata/RHSA-2024:6964)
- [CNA](https://access.redhat.com/errata/RHSA-2024:7408)
- [CNA](https://access.redhat.com/errata/RHSA-2024:8991)
- [CNA](https://access.redhat.com/errata/RHSA-2024:9136)
- [CNA](https://access.redhat.com/errata/RHSA-2024:9620)
- [CNA](https://access.redhat.com/errata/RHSA-2024:9912)
- [CNA](https://access.redhat.com/security/cve/CVE-2024-7409)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2302487)
- [CVE](https://security.netapp.com/advisory/ntap-20250502-0008/)
- [CVE](https://lists.debian.org/debian-lts-announce/2025/09/msg00011.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 1.03%
- **EPSS Percentile:** 61.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._