Threats tagged 'ghsa-wq34-548c-54v3'

A concurrency vulnerability in the Linux kernel's GTP (GPRS Tunneling Protocol) implementation allows simultaneous deletion of the same PDP context via different code paths, leading to potential use-after-free and memory corruption. This issue arises because the generic-netlink delete path only holds RCU protection, while the network device unregistration path is serialized by RTNL, allowing races. The flaw was confirmed by static analysis and reproduced on a KASAN-enabled kernel, causing general protection faults and wild memory accesses. The fix involves serializing PDP context add and delete operations with a shared mutex to prevent concurrent deletions.