CVE-2024-26622

A flaw was found in the Tomoyo module in the Linux kernel. The tomoyo_write_control function in the security/tomoyo/common.c file does not protect a buffer from multiple concurrent write requests. This issue potentially leads to a use-after-free or double-free, resulting in a denial of service.

The kernel as shipped in Red Hat Enterprise Linux 8 and 9 is not affected by this vulnerability because the Tomoyo module is not built.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.