CVE-2024-43835

A flaw was found in the Linux kernel's virtio network driver (virtio_net). This vulnerability allows a local user to cause a Denial of Service (DoS) by triggering a system crash. The issue occurs because the driver incorrectly assumes it is operating within a network polling context during certain transmission operations, leading to internal kernel failures.

This vulnerability is rated as Moderate for Red Hat Enterprise Linux because exploitation requires local access within virtualized guest systems and is constrained to causing a denial of service. The flaw occurs in virtual guest instances operating the virtio network interface when transmit cleanup paths run outside of the standard softirq polling routine, such as during kernel netpoll operations. An unprivileged local attacker could trigger this condition to provoke a kernel warning or crash, but the vulnerability cannot be exploited remotely nor does it permit arbitrary code execution or data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.