Threats tagged 'ghsa-gqgj-ww6j-qxj3'

A vulnerability in the Linux kernel's netfilter logging subsystem (nf_log) allows a race condition during logger unregistration. This occurs because global logger backends are unregistered after per-network namespace operations, leaving a window where a sysctl or netlink writer can rebind a still-registered logger. This can lead to dereferencing a stale pointer, potentially causing system instability or security issues. The issue is fixed by changing the order of unregistration to remove global logger backends before per-net teardown.