In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() vxlan_mdb_flush() iterates over the MDB entries using hlist_for_each_entry_sa…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() vxlan_mdb_flush() iterates over the MDB entries using hlist_for_each_entry_safe(), which only tolerates the removal of the current entry. Contrary to the comment above the loop, the removal of an entry can trigger the removal of another entry. Flushing the remotes of a (*, G) entry also removes the (S, G) entries that were created for its source list, once they are left wit…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/3e6b705bc162fc7257645725a7d2cf6c71250318
- https://git.kernel.org/stable/c/bc2dc66a6693a78f8c1e6ca2dbebd50f16e2c366
- https://git.kernel.org/stable/c/c7dc26d06f90ca11bbd6114f6a62a67d038816c7
- https://git.kernel.org/stable/c/f26400b325bdc2868e40612c4804c82cf8ba6275
- https://git.kernel.org/stable/c/f8a9b988e7a7bc674e74e8c901794d792c35689e
时间线
- nvd_ingest NVD