CVE-2024-36927

A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user can cause a Denial of Service (DoS) by exploiting a race condition when altering socket options while network packets are being constructed. This issue leads to an uninitialized memory read that can crash the system.

This vulnerability is rated as Moderate severity because exploitation requires local access and privileges to establish raw network sockets, restricting the impact to a denial of service rather than code execution or privilege escalation. Under default Red Hat Enterprise Linux configurations, standard unprivileged users cannot open raw sockets unless granted the CAP_NET_RAW capability or operating within an unprivileged user namespace. Consequently, the risk is constrained to environments where untrusted local users have specialized network capabilities, leading at most to a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.