Threats tagged 'ghsa-7x5f-23mf-qfp3'

A vulnerability in the Linux kernel IPv6 flowlabel handling allowed unprivileged users to bypass lease limits per socket, potentially causing unbounded growth of socket lease lists. The flaw involved the ipv6_flowlabel_get() function allocating entries without proper admission checks on repeated GET requests, which could consume excessive host memory. The issue has been resolved by enforcing a maximum lease limit per socket and proper capability checks.