CVE-2024-40983

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.0-496.el8.x86 64

Description The issue is related to a problem in the TIPC decryption path where crypto requests might return asynchronously, leading to a potential crash if a refcount is not forced on the skb's destination entry before entering the xfrm type input/output handlers. The skb dst force() function should be called before doing decryption to avoid this issue. This problem was reported by Shuang when a specific warning was triggered.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this problem. At the moment, there is no information about a newer version that contains a fix for this vulnerability.