CVE-2024-36929

A flaw was found in the Linux kernel. When copying or expanding fragmented Generic Segmentation Offload (GSO) network packet buffers, the kernel improperly linearizes them, leaving the buffers in an invalid state. A local user can exploit this vulnerability to trigger a kernel crash during subsequent packet processing, resulting in a Denial of Service (DoS).

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and is strictly limited to a denial of service (system crash). Unprivileged local users could trigger an invalid state during kernel network buffer duplication, leading to a kernel panic. The issue does not permit privilege escalation or compromise of data confidentiality or integrity, and it cannot be triggered directly by remote network traffic alone.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.