Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06
• git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8
• git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94
• git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b
• git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a
• git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee
• git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3