Threats tagged 'ghsa-5qfp-9h7g-rcpm'

A critical vulnerability in the Linux kernel's macvlan networking driver was resolved. The issue involved macvlan devices not inheriting needed_headroom and needed_tailroom values from their underlying lower devices, which could cause memory handling errors such as skb headroom underflows or use-after-free crashes. This flaw affected specific Linux kernel versions and could lead to severe impacts including system crashes. The vulnerability has a high CVSS score of 9.8, indicating critical severity. The fix involves properly inheriting these parameters during macvlan initialization and updating them on device feature changes.