EUVD-2022-54671

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb-nfct and set skb-nfct to the already-confirmed entry. This wasn't found before because the conntrack entry and the...

CVE-2022-49561

CVE-2022-49561 : In the Linux kernel netfilter conntrack path, the vulnerability arises when a conntrack entry is re-fetched after insertion, and a clash can cause the skb->_nfct to be freed and then rebound to an already-confirmed entry. The issue stems from freeing the conntrack entry/extens...