Threats tagged 'ghsa-vfx5-qp78-q7gw'

A vulnerability in the Linux kernel's network subsystem allowed unprivileged users in a user and network namespace to set an excessively large tx_queue_len value, leading to oversized ring buffer allocations and potential exhaustion of global memory. This was due to missing upper bounds on tx_queue_len in several subsystems such as pfifo_fast, tun, and tap. The issue was fixed by capping tx_queue_len at S16_MAX (32767) to reject oversized values at set time, preventing memory exhaustion.