Threats tagged 'ghsa-5hrc-2j7x-qhwq'

A vulnerability in the Linux kernel's net/sched cls_u32 component allows duplicate handles to be created when the node ID pool is exhausted. This occurs because the function gen_new_kid() returns a fallback handle instead of an error when ID allocation fails, causing handle collisions in the hash table. This breaks handle uniqueness and can lead to incorrect removal and reuse of live nodes. The issue affects configurations with CONFIG_NET_SCHED and CONFIG_CLS_U32 enabled and can be triggered by adding a large number of u32 filters or proto entries. The vulnerability has been resolved by adding proper exhaustion checks and returning errors when the node ID space is exhausted.