Linux kernel (net routing): Use-after-free in network route management (__dst_negative_advice) - actively exploited

CVE-2024-36971Kernel, userspace & hypervisorKnown exploitedcurated

Impact

Use-after-free in network route management (__dst_negative_advice) - actively exploited [KEV]

Who can reach it

Any tenant process in a container with CAP_NET_ADMIN

What to do

Livepatchable; otherwise drain + reboot

References

https://access.redhat.com/security/cve/CVE-2024-36971

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.