CVE-2024-42093

A potential stack overflow flaw was found in the Linux kernel’s DPAA2 ethernet driver. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Red Hat Enterprise Linux not affected.

To successfully exploit this bug, an attacker must be able to access sensitive data from kernel memory — like secrets, credentials, or system state.

But this bug is:

• A stack overflow (not a read or leak),
• Occurring inside a kernel driver during internal processing,
• With no known exploit that leaks data from memory. So unless it can be exploited to leak data, C:L is more appropriate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.