cve 2024 49940

CVE-2024-49940 is a Linux kernel vulnerability that affects the L2TP (Layer 2 Tunneling Protocol) implementation, specifically a lifecycle race condition in the session/tunnel code. This race can cause a tunnel refcount underflow, leading to kernel instability or denial-of-service conditions. The patch for this CVE focuses on improving availability by closing the race. Administrators running hosts with L2TP enabled or L2TPv3 sessions should prioritize patching their kernels. The fix has been backported to stable kernels and distributions. This tag covers discussions about the vulnerability, its impact on system stability, and patching guidance for Linux systems.