CVE-2024-35860

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. A local user could exploit this vulnerability to cause a Denial of Service (DoS) by crashing the system. The issue occurs because the kernel prematurely frees BPF link structures instead of waiting for active programs to finish accessing them. This timing flaw results in a use-after-free condition, where memory is accessed after it has already been deallocated.

This vulnerability is rated as Low severity for Red Hat Enterprise Linux because exploitation requires elevated privileges, such as CAP_BPF or CAP_SYS_ADMIN, to attach and execute the affected BPF tracing mechanisms. Unprivileged accounts cannot manage or attach multi-kprobe or multi-uprobe links, substantially limiting the attack surface in standard production environments. Consequently, the risk is confined to local denial-of-service scenarios initiated by users that already possess substantial administrative control over the host.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.