CVE-2024-24783 is a vulnerability in the golang crypto/x509 package where the Verify function panics when processing certificates that use an unknown public key algorithm. This affects Red Hat's containernetworking-plugins and gvisor-tap-vsock packages, which are used for container network interface configuration and networking for podman-machine VMs, respectively. The vulnerability is rated moderate by Red Hat Product Security. Security updates have been released for multiple Red Hat Enterprise Linux 9 versions and architectures to fix this issue.

The vulnerability causes a panic in the certificate verification process, which could disrupt network connectivity or related operations in container networking plugins and podman-machine virtual machines. The impact is rated moderate, indicating a potential denial of service or stability issue but no direct code execution or privilege escalation is described.

Red Hat has released official security updates for containernetworking-plugins and gvisor-tap-vsock packages in Red Hat Enterprise Linux 9. Users should apply these updates as detailed in the Red Hat advisory (https://access.redhat.com/articles/11258) to remediate the vulnerability. No additional mitigation steps are indicated by the vendor.