CVE-2024-27052

A vulnerability was found in the Linux kernel's net rtl8xxxu_core.c driver, where a race condition can lead to a use-after-free situation in the rtl8xxxu_stop() function. This occurs when the workqueue is still running but the driver has been stopped and can lead to c2hcmd_work attempting to access memory that has been freed. This issue can lead to memory corruption or crashes.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access on a system utilizing specific Realtek USB wireless hardware, limiting the primary risk to a localized denial of service. USB Wi-Fi dongles supported by the rtl8xxxu driver are rarely deployed in enterprise environments. An attacker must have permissions to bring down or manipulate the network interface to trigger the race condition and crash the kernel.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.