CVE-2023-54262

CVE-2023-54262 relates to the Linux kernel mlx5e flow post-action handling. The issue arises from cloning post-action attributes twice: mlx5e_clone_flow_attr_for_post_act() clones attributes, then mlx5e_tc_post_act_add() clones again, causing a stale second copy and a use-after-free in neigh upda...