CVE-2024-43834

A flaw was found in the Linux kernel's eXpress Data Path (XDP) subsystem. A local user with permissions to modify network interface settings could exploit this vulnerability to cause a Denial of Service (DoS) and crash the system. When cleaning up network memory resources during interface reconfiguration or teardown, the kernel attempts to acquire a blocking lock while in a non-blocking execution context. This invalid locking sequence can lead to a kernel hang or panic, disrupting host availability.

This vulnerability is rated as Moderate because exploitation requires local access and elevated administrative privileges to modify network interface settings or tear down memory pools. In standard Red Hat Enterprise Linux environments, unprivileged users do not possess the capabilities necessary to invoke the relevant network device reconfiguration paths. While triggering the invalid lock sequence can lead to a kernel crash or denial of service, the requirement for high local privileges significantly constrains practical attack scenarios.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.