CVE-2024-38612

A flaw was found in the Linux kernel's IPv6 segment routing component. An improper error-handling path fails to unregister network communication interfaces if an initialization step fails under certain kernel configurations. This incomplete cleanup leaves residual state in the kernel, which may lead to system instability or a Denial of Service (DoS).

This vulnerability is assessed as Moderate severity because it is limited to a local denial of service that requires a specific initialization failure during kernel startup. The flaw resides in an error-handling routine invoked only when IPv6 segment routing is compiled without lightweight tunnel support. Because standard Red Hat Enterprise Linux kernels enable lightweight tunneling by default, typical enterprise deployments do not expose this faulty code path.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.