Executive Summary

This vulnerability in the Linux kernel involves the tcp_fastopen_active_disable_ofo_check() function, where the code did not use RCU (Read-Copy-Update) properly, leading to a potential use-after-free (UAF) condition on the flags of dst_dev(). The fix involved using dst_dev_rcu() to avoid unsafe atomic operations and prevent the UAF.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability could lead to a use-after-free condition in the Linux kernel's TCP implementation, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code or cause denial of service.

Useful 0 Not Useful 0