CVE-2024-27415

A security vulnerability was identified in the Linux kernel's netfilter subsystem, specifically affecting the handling of multicast and broadcast packets on network bridges. The issue arises from a race condition in the connection tracking (conntrack) module when processing cloned socket buffers (skbs) that reference the same connection entry (nf_conn). This condition can lead to system instability or potential security risks.

This vulnerability is rated as Moderate severity for Red Hat because triggering the flaw requires a specific bridging and connection-tracking setup—such as network bridges handling multicast or broadcast frames alongside macvlan devices—limiting the impact primarily to a local denial of service. Standard configurations that do not perform stateful inspection on bridged multicast traffic are not exposed. Exploiting the race condition requires an attacker to send unconfirmed multicast traffic with precise timing to induce kernel instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.