CVE-2024-50033

A flaw was found in the Linux kernel. The slhc_remember() function, which handles Serial Line Internet Protocol (SLIP) header compression, did not properly validate incoming packet sizes and headers. A local attacker could exploit this by sending specially crafted malicious packets, leading to an uninitialized memory read and potentially causing a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the slip kernel module from loading if the SLIP protocol is not required. This can be achieved by creating a modprobe configuration file:

echo "install slip /bin/true" > /etc/modprobe.d/disable-slip.conf

After applying this change, a system reboot is required for the mitigation to take effect. This action may impact systems that rely on the SLIP protocol for network communication.