Threats tagged 'ghsa-3xw5-26jc-pqjh'

A vulnerability in the Linux kernel's netfilter nft_objref component allows referencing a synproxy stateful object from the OUTPUT hook, causing a kernel crash due to infinite recursive calls. This issue has been resolved by implementing validation functions for objref and objrefmap expressions, specifically for the NFT_OBJECT_SYNPROXY type. Attempts to reference a synproxy object in the OUTPUT hook now result in an error preventing the crash.