Threats tagged 'ghsa-cr3v-f62w-cwx5'

A vulnerability in the Linux kernel's netfilter conntrack TCP handling was addressed by changing the timeout used for certain non-closing RST packets. Previously, the timeout was incorrectly set to a short close timeout even when the connection remained established, potentially allowing conntrack entries to expire prematurely while TCP endpoints were still active. The fix uses the UNACK timeout for these RST packets, avoiding premature expiration while preserving appropriate timeouts for closing RSTs.