CVE-2024-53206

A use-after-free vulnerability was found in the reqsk_timer_handler() function in the Linux kernel's TCP component. This issue occurs when an incorrect request object is passed during cleanup after a retry attempt fails, where a timeout leads to denial of service.

The vulnerability is considered moderate because it requires specific conditions to exploit, such as a failed retry attempt during request migration, leading to a use-after-free, which can cause potential system instability or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.