CVE-2024-53091

A flaw was found in the Linux kernel. A local user can exploit this vulnerability to trigger a Denial of Service (DoS) through a system crash. The issue occurs in the Berkeley Packet Filter (BPF) socket map subsystem, where the kernel incorrectly assumes that all monitored sockets are standard Internet sockets when checking Transport Layer Security (TLS) context data. When non-Internet communication sockets are processed, the kernel dereferences an invalid memory address, leading to a kernel page fault and system failure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.