kernel: ip_vti: fix potential slab-use-after-free in decode_session6

A use-after-free flaw was found in the Linux kernel's ipvti IPsec Virtual Tunnel Interface implementation when transmitting IPv6 packets with the SFB qdisc attached. A local user with CAPNETADMIN capability can trigger this issue by configuring an ipvti interface with an SFB qdisc and sending IPv...

PT-2008-6964 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: openSUSE kernel-rt debug-debuginfo versions affected versions not specified openSUSE kernel-rt-debugsource versions affected versions not specified Linux kernel versions prior to 2.4.36.6 and prior to 2.6.25.5 Description: The issue concerns...