In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output() Use RCU in ip6output() in order to use dstdevrcu() to prevent possible UAF. We can remove rcureadlock()/rcureadunlock() pairs from ip6finishoutput2().
{ "urgency": "not yet assigned" }