The vulnerability CVE-2024-1023 affects Eclipse Vert.x, specifically its HTTP client implementation, where a memory leak arises from the use of Netty FastThreadLocal data structures that are not properly released after their effective lifetime. This leak is triggered when connections are made to different hosts and can be accelerated by an attacker with intimate runtime knowledge. The issue is documented with a CVSS v3.1 score of 6.5 (medium severity) and is included in Red Hat advisories for their build of Quarkus and Apache Camel for Quarkus. Multiple Red Hat errata provide updates and fixes addressing this memory leak.

The vulnerability results in a memory leak that can degrade system performance and availability by exhausting memory resources. It does not directly impact confidentiality or integrity but can cause denial of service conditions due to resource exhaustion. There are no known exploits in the wild at this time. The vulnerability requires network access and low complexity to exploit, with no user interaction needed.

Red Hat has released security updates for their build of Quarkus (version 3.2.11) and related products that address CVE-2024-1023. Users should apply these official patches as soon as possible. Before applying updates, it is recommended to back up existing installations, including applications, configuration files, and databases. No alternative mitigations or workarounds are indicated in the vendor advisories. Patch status is confirmed as fixed in the updated Red Hat packages.