PT-2026-91307

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix use-after-free in ip6 finish output2 ip6 finish output2 caches a pointer to the IPv6 destination address daddr before invoking lwtunnel xmit. The LWT-BPF transmit path or other encapsulation operations within lwtunnel...

AZL-48686 CVE-2024-44986 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6finishoutput2 If skbexpandhead returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold rcureadlock to make sure the dst and associated idev are alive...

PT-2024-5946

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to the use of memory after it has been freed in the ip6 finish output2 function of the Linux kernel. This can lead to a denial of service. The problem occurs when skb expan...