CVE-2024-26950

A flaw was found in the Linux kernel's WireGuard implementation. When processing Netlink communication messages, the network driver improperly references device data through a peer structure rather than the operation context, potentially triggering a null pointer dereference. A local user could exploit this vulnerability to crash the system, resulting in a Denial of Service (DoS).

This vulnerability is rated as Low severity because exploitation requires local access and the WireGuard kernel module is not loaded by default on Red Hat Enterprise Linux. Systems are only susceptible if WireGuard network interfaces have been explicitly configured and are actively manipulated via Netlink. Because unauthorized users cannot leverage this flaw for privilege escalation or data leakage, the security risk is confined to a local denial of service via a kernel panic.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.