CVE-2024-39293

A flaw was found in the Linux kernel's XDP (eXpress Data Path) socket subsystem. Due to a missing queue validation check, multiple network processing threads can redirect traffic to the same socket simultaneously. A local user can exploit this race condition to corrupt internal socket structures and memory rings, resulting in a kernel crash and a Denial of Service (DoS).

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and specialized networking configurations using AF_XDP sockets. While triggering the race condition can result in a denial of service by crashing the kernel, it does not facilitate privilege escalation or data compromise. Furthermore, AF_XDP socket usage is uncommon in default deployments and generally requires elevated network administration privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.