CVE-2024-35901

A flaw was found in the Linux kernel's Microsoft Azure Network Adapter (MANA) driver. An unnecessary buffer alignment calculation allows the driver to accept packets that exceed the configured maximum transmission unit (MTU). A remote attacker could send oversized network packets to trigger a kernel panic, resulting in a Denial of Service (DoS).

This vulnerability is rated as Low severity for Red Hat Enterprise Linux because exploitation is restricted to environments operating Microsoft Azure Network Adapter (MANA) hardware and results solely in a kernel crash without impacting data confidentiality or integrity. Installations running on other cloud providers, hypervisors, or bare-metal servers do not load this driver and are not exposed. While oversized packets can trigger a denial of service through an skb panic, the issue cannot be leveraged for privilege escalation or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.