Threats tagged 'ghsa-553v-hjpm-738q'

A vulnerability in the Linux kernel related to the bpf_redirect_neigh() helper caused a memory leak of metadata_dst objects in the kernel's kmalloc-256 slab. This issue affected the BPF egress gateway feature used by Cilium for Kubernetes pod traffic, where vxlan tunnels allocate metadata_dst objects that were not properly released. The leak occurs because bpf_redirect_neigh() sets a new destination entry without releasing the previous one, leading to increasing kernel memory usage over time.