CVE-2024-35962

A denial of service vulnerability exists in the Linux kernel such that @optlen validation is not called before the function xt_alloc_table_info(), an attacker could craft a payload that results in a crash resulting in loss of availability.

This vulnerability is rated as Moderate severity because exploitation is restricted to local attackers with network administration privileges or unprivileged users capable of creating user and network namespaces. While a successful attack can crash the host kernel and result in a denial of service, it cannot be triggered remotely and does not compromise system confidentiality or data integrity. In standard Red Hat Enterprise Linux environments, unprivileged access to netfilter table replacement is constrained, limiting the blast radius to local disruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.