CVE-2024-56647

A denial of service vulnerability was found in the Linux kernel. icmp_route_lookup() creates input routes for locally generated packets during xfrm relookup ICMP traffic. Then it will set the input route (dst->out = ip_rt_bug) to skb for DESTUNREACH, leading to loss of availability of the system.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation is limited to a local denial of service that requires specific networking prerequisites, including configured IPsec/XFRM policies and localized link failures. An attacker or unprivileged user cannot exploit this remotely under default system configurations, and system confidentiality and integrity are not compromised. Consequently, standard deployments without custom IPsec routing rules for ICMP traffic remain largely unexposed to this condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.