Threats tagged 'ghsa-5v73-p3r2-qvx5'

A vulnerability in the Linux kernel's network scheduler (net/sched) related to handling TC_ACT_REDIRECT from qdisc filter chains has been resolved. When a traffic control (TC) filter attached to a qdisc filter chain returned TC_ACT_REDIRECT, the redirect was silently lost, causing packets to be enqueued normally instead of being redirected. This issue was introduced with the addition of the bpf_redirect() helper and was exacerbated by changes in how bpf_net_context is managed. The fix involves dropping packets when TC_ACT_REDIRECT cannot be honored, making the failure visible rather than silently passing packets through.