CVE-2024-26856

A flaw was found in the Microchip Sparx5 network switch driver within the Linux kernel. When an entry is removed from the Media Access Control (MAC) address table, the driver accesses data from the entry after it has already been freed from memory. A privileged local user could exploit this use-after-free condition to cause memory corruption, resulting in a system crash and a Denial of Service (DoS).

This vulnerability is rated as Low severity because exploitation requires local privileged access and the presence of specialized Microchip Sparx-5 network switch hardware. Red Hat Enterprise Linux does not enable or compile this network switch driver in standard kernel builds, leaving default enterprise deployments unexposed. Consequently, the flaw presents minimal operational risk and does not affect supported Red Hat Enterprise Linux installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.