EUVD-2022-54671

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb-nfct and set skb-nfct to the already-confirmed entry. This wasn't found before because the conntrack entry and the...

CVE-2022-49561

CVE-2022-49561 concerns a race in Linux kernel netfilter conntrack handling where, on insertion conflicts, skb->_nfct can be freed and rebound to an already-confirmed conntrack entry. The issue arises because conntrack entries and extension space can be freed after an RCU grace period, and the...