Threats tagged 'ghsa-r764-27jf-q424'

A NULL pointer dereference vulnerability was identified and fixed in the Linux kernel's netlabel subsystem related to CALIPSO on IPv4 sockets. The issue occurs when an IPv4 socket's connect function is called with an IPv6 address, leading to a NULL pointer dereference in calipso_sock_setattr(). This flaw could cause a denial of service by crashing the kernel. The vulnerability has been patched by adding a NULL pointer check before accessing the IPv6 socket structure.