Threats tagged 'ghsa-9pxv-wwmf-9jpr'

A vulnerability in the Linux kernel's IPv4 routing table ID allocation was resolved by bounding the automatic table ID allocation to 4096. Previously, the function fib_empty_table() probed every table ID from 1 up to RT_TABLE_MAX (0xFFFFFFFF) to find a free ID, causing potentially unbounded RTNL lock hold times. The fix limits the search to 4096, causing rule addition to fail with ENOBUFS if the range is exhausted. This automatic allocation path is IPv4-only, legacy, undocumented, and unused by major tools like NetworkManager and systemd.