Threats tagged 'ghsa-346r-c6v5-7g38'

A vulnerability in the Linux kernel's xfrm subsystem involves improper deletion of ipcomp fallback tunnels, which can lead to references remaining in kernel data structures and triggering warnings. The issue arises because fallback tunnels are deleted only when the last user state is destroyed, but references may still exist, preventing timely cleanup. This can occur due to deferred freeing of socket buffers (skbs) in TCP and IP reassembly scenarios. The fix involves deleting the fallback state immediately after the last dependent user state is deleted, ensuring proper resource cleanup and avoiding kernel warnings.