CVE-2024-49940

Medium

Published: —Translated: 07/08/2026(UTC)NVD NIST

Summary

In the Linux kernel, in the L2TP subsystem, a possible tunnel refcount underflow was fixed, which could occur during session deletion when the tunnel pointer was invalid.

Risk Assessment

Refcount underflow can lead to improper memory management, potentially causing system crashes or security breaches.

Recommendation

Apply the Linux kernel patch for L2TP to prevent refcount issues and ensure stability.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: l2tp: prevent possible tunnel refcount underflow When a session is created, it sets a backpointer to its tunnel. When the session refcount drops to 0, l2tp_session_free drops the tunnel refcount if session->tunnel is non-NULL. How