CVE-2024-27395

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: Fix Use-After-Free in ovs_ct_exit

The Linux kernel CVE team has assigned CVE-2024-27395 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050836-CVE-2024-27395-573e@gregkh/T

This vulnerability is rated with a Low severity because exploitation requires local privileges to manage network namespaces and dismantle connection-tracking limits, significantly restricting exposure. The flaw manifests as a race condition during the module cleanup and tear-down sequence, making inadvertent triggering during standard operations unlikely. Successful exploitation leads only to a local denial of service via a kernel crash, without compromising data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.