CVE-2024-27396

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a Use-After-Free vulnerability in the gtp dellink function. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The problem arises because call rcu, which is called in the hlist for each entry rcu traversal of gtp dellink, is not part of the RCU read critical section. As a result, the RCU grace period may pass during the traversal, and the key may be freed. To prevent this, it should be changed to hlist for each entry safe.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.