CVE-2024-38589

A flaw was found in the Linux kernel's NetROM network protocol subsystem. This vulnerability allows a local user to cause a Denial of Service (DoS) by issuing specific I/O control (ioctl) requests. Due to an inconsistent lock acquisition sequence, the kernel can enter a deadlock state, leading to a complete system freeze.

This vulnerability is rated as Low severity because the NetROM amateur radio protocol is not loaded by default and is rarely utilized in enterprise environments. To trigger the flaw, a local attacker must execute routing ioctl calls against an initialized NetROM interface, which restricts the blast radius strictly to a local denial of service. Standard installations that do not configure or load this legacy networking module remain unexposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.