Threats tagged 'ghsa-cj8h-w72f-5pwh'

A use-after-free vulnerability in the Linux kernel's netfilter nf_tables subsystem was resolved. The issue arises from queuing packet path object notifications without proper synchronization, leading to a race condition where a freed sk_buff structure is accessed. This occurs when notifications are enqueued without holding the commit_mutex, causing potential memory corruption. The fix restores immediate sending of notifications from the packet path and retains queuing only within netlink transactions under commit_mutex protection.