In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ipvs: stop estimator after disabled calc phase<\/p>\n
IPVS estimator kthread 0 starts with zeroed chain and tick limits until
\nits initial calculation phase completes. If network namespace teardown
\nclears ipvs->enable during that phase, ip_vs_est_calc_phase() can return
\nwithout installing positive limits.<\/p>\n
The kthread can then continue into its main loop and drain
\nest_temp_list with zero chain_max, tick_max and est_max_count values.
\nEach enqueue consumes one available tick row, but est_count never
\nreaches the zero est_max_count value. After all rows are consumed, the
\nrow lookup returns IPVS_EST_NTICKS and ip_vs_enqueue_estimator() writes
\npast the ticks and tick_len arrays.<\/p>\n
Exit kthread 0 after the calculation phase if the kthread is stopping or
\nIPVS has been disabled. That keeps temporary estimators from being
\ndrained after the limits failed to initialize.<\/p>\n
Estimator kthreads can now self-exit before teardown or reload stops
\nkd->task. Keep an extra task reference after creation and release it
\nwith kthread_stop_put(), so kd->task remains valid until the stop paths
\nconsume that reference.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ipvs: stop estimator after disabled calc phase<\/p>\n
IPVS estimator kthread 0 starts with zeroed chain and tick limits until
\nits initial<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-11256","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/11256","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11256"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11256"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11256"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}