Threats tagged 'ghsa-82gw-3rjg-qh2p'

A vulnerability in the Linux kernel's IPv6 fragment reassembly code allows heap corruption due to stale metadata usage. This occurs when fragment queues are not properly invalidated before flushing, leading to out-of-bounds memory access. The flaw can be leveraged for local privilege escalation in environments with unprivileged network namespaces. The issue has been resolved by properly killing incomplete queues and flushing all queues owned by the dying rhashtable.