Threats tagged 'ghsa-8ccp-78hm-hx73'

A use-after-free vulnerability was identified and resolved in the Linux kernel's mlxsw spectrum_router component. The issue arose because the driver stored a pointer to a neighbour object without properly holding a reference, leading to potential use-after-free when dereferencing that neighbour. The fix involved simplifying the reference counting scheme to always take a reference when storing a neighbour pointer, preventing premature freeing. This vulnerability was reproducible and tested extensively before the patch was applied.