CVE-2024-42075

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. The BPF arena memory management logic does not properly track reference counts during memory remapping operations. A local attacker could exploit this flaw to trigger a use-after-free condition when closing the memory mapping, resulting in a denial of service (DoS) or potentially arbitrary code execution.

This vulnerability is rated as Low severity because the affected BPF arena feature is not present in supported Red Hat Enterprise Linux releases, and exploitation on affected kernels requires high local privileges. The underlying functionality was introduced in newer upstream kernels and is not backported to enterprise distributions, preventing exposure on default deployments. Where present, an attacker must possess administrative privileges such as CAP_BPF or CAP_SYS_ADMIN to create and manipulate the required memory maps, significantly limiting the risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.