Linux kernel Heap Buffer Overflow DoS

The vulnerability of the l2tpv3sessionget function in the net/l2tp/l2tpcore.c module of the Linux kernel is related to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2024-49940

In the Linux kernel, the following vulnerability has been resolved: l2tp: prevent possible tunnel refcount underflow When a session is created, it sets a backpointer to its tunnel. When the session refcount drops to 0, l2tpsessionfree drops the tunnel refcount if session-tunnel is non-NULL...