CVE-2024-56566

A use-after-free list corruption vulnerability was found in the Linux kernel. If an allocated object fails in alloc_consistency_checks, all objects of the slab will be marked as used and the slab will be removed from the partial list. When an object belonging to the slab gets freed later, the remove_full() function is called. Since the slab is neither on the partial list nor on the full list, it eventually leads to a list corruption.

This vulnerability is rated Moderate rather than Important because it is only reachable when the kernel is explicitly booted with SLUB debugging enabled, which is not the default configuration in Red Hat Enterprise Linux. Under these non-standard debugging conditions, an allocation consistency failure can lead to internal slab tracking errors, culminating in a kernel crash and localized denial of service. Standard production environments running default kernel parameters are not exposed to this flaw during normal operation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.