CVE-2024-49936

A flaw was found in the net/xen-netback component of the Linux kernel. This use-after-free (UAF) vulnerability occurs in the xenvif_flush_hash() function when kfree_rcu is called outside of the RCU (Read-Copy-Update) read critical section. This can lead to memory corruption, potentially allowing a local attacker to achieve privilege escalation, disclose sensitive information, or cause a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.