CVE-2024-27010

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Fix mirred deadlock on device recursion

The Linux kernel CVE team has assigned CVE-2024-27010 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050148-CVE-2024-27010-5a68@gregkh/T

This vulnerability is rated as having a Low impact for Red Hat Enterprise Linux because triggering the flaw requires privileged access to establish network traffic control policies, limiting the threat scope to a local denial of service. Under default system configurations, classful egress queueing disciplines are not configured to redirect or mirror packets recursively onto the same network interface. Consequently, an unprivileged user cannot exploit this issue to disrupt kernel operations without already possessing administrative networking privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.