CVE-2024-27414

In the Linux kernel, the following vulnerability has been resolved:

rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back

The Linux kernel CVE team has assigned CVE-2024-27414 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051702-CVE-2024-27414-5c5d@gregkh/T

This vulnerability is rated as having a Low impact because triggering the flaw requires local network configuration privileges (such as CAP_NET_ADMIN) to send crafted rtnetlink bridge messages. Under standard enterprise deployments, unprivileged users cannot configure bridge network attributes directly. While improper bounds handling during bridge flag write-back can lead to out-of-bounds memory writes and system crashes, exploitation is constrained by the prerequisite administrative privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.