CVE-2024-26953

A flaw was found in the Linux kernel's IPsec Encapsulating Security Payload (ESP) implementation. When reorganizing network packet buffers during output processing, memory pages originating from a page pool are improperly released using standard page refcounting rather than page pool deallocation. A local user could exploit this vulnerability during network packet forwarding to trigger a memory leak, resulting in a system crash and Denial of Service (DoS).

This vulnerability is rated as Low impact because exploitation requires a non-default network forwarding and tunneling topology combining IPsec ESP processing with page-pool-backed packets. Under standard Red Hat Enterprise Linux configurations, establishing the necessary transformation policies and interface routing requires administrative privileges. While a continuous leak of page pool allocations can lead to memory exhaustion and a system crash, unprivileged remote actors cannot directly exploit this flaw, and confidentiality and integrity are not compromised.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.