CVE-2024-57982

A flaw was found in the Linux kernel. This vulnerability allows a local user to cause a Denial of Service (DoS) via a system crash. A race condition between table resizing and state lookup operations in the IPsec packet transformation (xfrm) subsystem can cause the kernel to perform an out-of-bounds memory read during concurrent state lookups.

This vulnerability is rated as Moderate impact because exploiting the race condition requires precise timing during IPsec state table resizing, with the primary blast radius limited to a denial of service via a kernel crash rather than arbitrary code execution. In Red Hat Enterprise Linux environments, the xfrm framework is utilized when IPsec packet transformation or tunneling services are active, and modifying state tables generally requires administrative networking privileges. Systems that do not actively manage or process IPsec traffic are unlikely to encounter the concurrent table modification conditions necessary to trigger this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.