Threats tagged 'ghsa-899c-qvc8-9hpp'

CVE-2024-42246 is a vulnerability in the Linux kernel's net and sunrpc subsystems where the xs_tcp_setup_socket() function can enter an infinite loop if a BPF program on kernel_connect() returns -EPERM. This causes excessive syslog flooding and may lead to kernel freeze. The issue arises because -EPERM is not properly remapped to a more expected network error code, causing improper error handling.