Threats tagged 'ghsa-qrrh-7fhh-g486'

CVE-2024-46763 is a vulnerability in the Linux kernel's fou (Foo-over-UDP) module that causes a null pointer dereference in the Generic Receive Offload (GRO) path. The issue occurs when the socket user data pointer becomes NULL during tunnel socket teardown, but in-flight packets still trigger the GRO handler, leading to a kernel crash. This flaw has been fixed by adding proper NULL checks and using safe dereferencing methods.