CVE-2024-26983

A flaw was found in the Linux kernel's bootconfig subsystem. During late system startup, boot configuration memory is released using an early-stage memory deallocation function after control has already been transferred to the primary memory allocator. This improper release creates a use-after-free (UAF) condition, which may allow a local attacker to cause a Denial of Service (DoS) by inducing system instability or a kernel crash.

This vulnerability is rated with a Low severity because it only occurs during early system initialization and cannot be triggered or manipulated by an unprivileged local user after system startup. The flaw involves improper memory reclamation when cleaning up boot configuration data prior to user space launching. Because the issue is strictly isolated to boot-time cleanup and presents no ongoing attack surface during standard runtime, the risk to Red Hat environments is minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.