CVE-2024-44998

In the Linux kernel, the following vulnerability has been resolved:

atm: idt77252: prevent use after free in dequeue_rx()

We can't dereference "skb" after calling vcc->push() because the skb is released.

This vulnerability is rated as Moderate severity because it requires the presence of specialized IDT 77252 ATM hardware, which is uncommon in enterprise deployments, thereby significantly limiting the attack surface. Furthermore, exploiting this race condition requires local access or specific network device interactions, restricting the overall blast radius. Standard Red Hat Enterprise Linux systems do not load this driver by default unless matching hardware is physically present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.