In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ilaoutput() As explained in commit 1378817486d6 ("tipc: block BH before using dstcache"), net/core/dstcache.c helpers need to be called with BH disabled. ilaoutput() is called from lwtunneloutput() possibly from process context, and under rcureadlock(). We might be interrupted by a softirq, re-enter ilaoutput() and corrupt dstcache data structures. Fix the race by using localbh_disable().