Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tls: Use skdstget and dstdevrcu in getnetdevforsock. getnetdevforsock is called during setsockopt, so it’s not under RCU. Using skdstgetsk-dev could trigger a Use-After-Free UAF error. Let’s use skdstget and dstdevrcu...