Threats tagged 'ghsa-5f32-qq4v-9hch'

CVE-2024-53680 is a medium severity vulnerability in the Linux kernel's IP Virtual Server (ipvs) component. It involves undefined behavior caused by uninitialized stack memory access in the function ip_vs_protocol_init(). This flaw can lead to a kernel oops or a boot-time panic when the ipvs module is loaded or built-in. The issue arises from the compiler generating code that falls through without a proper return due to uninitialized buffer usage, particularly when built with Clang/LLVM and certain kernel configurations. The vulnerability does not impact confidentiality or integrity but causes availability disruption (kernel crash).