CVE-2024-26834

A flaw was found in the Linux kernel's netfilter subsystem. When network packets are forwarded using the flow offload direct transmission path, destination routing entries are not properly released from memory. An attacker could exploit this vulnerability by sending network traffic through an affected flow offload configuration, continuously leaking kernel memory. Over time, this unreleased memory can lead to system resource exhaustion and a Denial of Service (DoS).

This vulnerability is rated as Low severity because triggering the memory leak requires non-default netfilter hardware or software flowtable offload routing configurations, limiting the threat to gradual resource depletion under specialized network flows. Standard Red Hat Enterprise Linux releases are not affected by this issue, as the flawed code was introduced in newer upstream kernels not shipped in supported enterprise products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.