CVE-2024-53092

A flaw was found in the Linux kernel's virtio_pci driver. When cleaning up administration virtqueue resources during device reset or removal, the driver accesses an incorrect pointer, resulting in a NULL pointer dereference. A local user could trigger this vulnerability to crash the kernel, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.