CVE-2024-26865

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. A local user can cause a Denial of Service (DoS) and system crash by triggering a use-after-free vulnerability during network namespace cleanup. When a network namespace is destroyed while an RDS TCP connection request is pending, an active timer callback can attempt to access already freed memory structures, leading to kernel memory corruption.

Red Hat has evaluated this vulnerability as having a Low security impact because Reliable Datagram Sockets (RDS) over TCP is not utilized in default system configurations, and triggering the underlying race condition requires precise timing during network namespace teardown. Exploitation demands local privileges to create and dismantle network namespaces, restricting the potential blast radius. Consequently, standard Red Hat Enterprise Linux environments are not exposed under default operational workloads.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.