Threats tagged 'ghsa-jpgq-r68h-x9q2'

A critical vulnerability in the Linux kernel's network handshake code allows duplicate handshake cancellations to leak socket references, leading to a reference count underflow. This occurs when a handshake request is cancelled multiple times but not properly marked as completed, causing improper socket reference handling. The issue can arise in scenarios such as SUNRPC client-server TLS handshake timeouts. The vulnerability has been resolved by adding a mechanism to detect and handle duplicate cancellations correctly.