Threats tagged 'ghsa-22jc-j6q2-9wv9'

A vulnerability in the Linux kernel's IP Virtual Server (ipvs) component involves incorrect argument ordering in the hton_seq() function during sequence option serialization. This flaw causes 24 bytes of a kmalloc-backed message to remain unwritten, potentially disclosing stale heap data and allowing replacement of live connection sequence state with stale buffer values. The issue has been resolved by correcting the argument order to pass the connection sequence state as the source and the message payload as the destination.