Threats tagged 'ghsa-3537-p4vp-g252'

A vulnerability in the Linux kernel's network scheduler (net/sched) allows unprivileged users to allocate kernel memory without proper memory controller group (memcg) accounting. This occurs in the traffic control (tc) classifier filter allocation paths, enabling kernel memory to be pinned outside memcg charging. The issue affects multiple classifiers and was fixed by adding GFP_KERNEL_ACCOUNT to relevant allocations and correcting error handling to prevent dangling pointers in the IDR. Exploitation requires specific kernel configurations and user namespace conditions.