CVE-2024-35890

A flaw was found in the Linux kernel's Generic Receive Offload (GRO) feature, where packets processed with a fragment list are not properly orphaned due to incorrect handling of socket references. This vulnerability can cause system instability or kernel bugs. The issue has been fixed by making sure that socket references are correctly removed during packet processing. Users should update their kernel to the patched version to mitigate this risk.

This vulnerability is evaluated as Moderate severity because exploitation requires local access with unprivileged credentials and is limited to causing a denial of service, without impacting data confidentiality or integrity. In standard Red Hat Enterprise Linux environments, Generic Receive Offload is enabled by default to optimize network packet processing, but triggering the flaw requires specific packet handling conditions involving segmented fragment lists. Because unprivileged users cannot leverage this condition for privilege escalation or unauthorized data disclosure, the blast radius is confined to host disruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.