CVE-2024-35969

This CVE addresses a race condition in the Linux kernel's IPv6 subsystem, specifically between the ipv6_get_ifaddr and ipv6_del_addr functions. This race condition can lead to use-after-free scenarios, potentially causing system instability or crashes.

This vulnerability is rated Moderate because exploitation requires local access and concurrent execution of network address management operations, restricting the attack vector to authenticated local users. In standard Red Hat Enterprise Linux configurations, successfully triggering this race condition leads to a kernel crash resulting in a denial of service, with no compromise to data confidentiality or integrity. Remote unauthenticated actors cannot exploit this flaw over the network.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.