Threats tagged 'ghsa-r9w6-9rjj-r9c5'

A null pointer dereference vulnerability in the Linux kernel's IP Virtual Server (IPVS) IPv4 code path was fixed. The flaw occurs when a route lookup fails and the error path calls dst_link_failure() with a NULL skb->dev pointer, leading to a kernel crash. This happens specifically when IPVS processes a packet in NAT mode with a misconfigured destination. The issue was caused by incomplete handling of skb->dev in the error path, resulting in a NULL pointer dereference in fib_compute_spec_dst(). A security update addressing this and other Linux kernel vulnerabilities has been released by SUSE and Ubuntu.