Threats tagged 'ghsa-23x6-w5q4-2mqw'

CVE-2024-56658 is a use-after-free vulnerability in the Linux kernel's network namespace dismantling process. The flaw occurs because the 'struct net' is freed prematurely before all destination callbacks are executed, leading to a slab-use-after-free in dst_destroy. This can cause memory corruption and potentially allow an attacker with local privileges to compromise system integrity. The issue was reported by Ilya and affects the xfrm4 and xfrm6 network initialization code paths.