CVE-2024-36928

A flaw was found in the Linux kernel's s390/qeth component. A local attacker with privileges to manage network devices could trigger a kernel panic by setting the hsuid attribute on an IQD Layer3 device while its network interface is active. This occurs because the kernel attempts to execute a null function pointer. Successful exploitation leads to a Denial of Service (DoS) for the system.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires elevated administrative privileges to modify hardware device attributes and is restricted solely to the s390x architecture. The issue specifically occurs when altering the HiperSockets identifier (hsuid) on an active Layer 3 network interface, causing a system crash and subsequent denial of service. Systems running on other hardware architectures or s390x systems without active HiperSockets configurations are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.