In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). syzkaller reported a warning of netns tracker [0] followed by KASAN…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). syzkaller reported a warning of netns tracker [0] followed by KASAN splat [1] and another ref tracker warning [1]. syzkaller could not find a repro, but in the log, the only suspicious sequence was as follows: 18:26:22 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ... connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @loopback}, 0x1c)…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1e9fd5cf8d7f487332560f7bb312fc7d416817f3 Patch
- https://git.kernel.org/stable/c/2a750d6a5b365265dbda33330a6188547ddb5c24 Patch
- https://git.kernel.org/stable/c/9905a157048f441f1412e7bd13372f4a971d75c6 Patch
- https://git.kernel.org/stable/c/9ceac040506a05a30b104b2aa2e9146810704500 Patch
- https://git.kernel.org/stable/c/f901ee07853ce97e9f1104c7c898fbbe447f0279 Patch
- https://git.kernel.org/stable/c/1e9fd5cf8d7f487332560f7bb312fc7d416817f3 Patch
- https://git.kernel.org/stable/c/2a750d6a5b365265dbda33330a6188547ddb5c24 Patch
- https://git.kernel.org/stable/c/9905a157048f441f1412e7bd13372f4a971d75c6 Patch
- https://git.kernel.org/stable/c/9ceac040506a05a30b104b2aa2e9146810704500 Patch
- https://git.kernel.org/stable/c/f901ee07853ce97e9f1104c7c898fbbe447f0279 Patch
Timeline
- nvd_ingest NVD