Threats tagged 'ghsa-5m7p-36vh-9w8v'

A use-after-free vulnerability in the Linux kernel's netfilter cttimeout module was resolved. The issue occurs during module unload when the timeout hook dereference and policy lookup are not properly synchronized, allowing access to freed memory. The fix involves clearing the hook and waiting for existing readers before unregistering per-net operations, preventing new lookups and ensuring safe memory access.