CVE-2024-38561

In the Linux kernel, the following vulnerability has been resolved:

kunit: Fix kthread reference

There is a race condition when a kthread finishes after the deadline and before the call to kthread_stop(), which may lead to use after free.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires local access and precise timing to trigger a race condition in the kernel unit testing framework, which is not part of standard production operations. In typical Red Hat Enterprise Linux deployments, KUnit test suites are intended exclusively for development and testing environments and are not executed during regular system use. Consequently, an unprivileged user cannot readily trigger this condition during normal workflows, though successful exploitation in a test scenario could potentially cause a denial of service or local privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.