CVE-2021-47402

A vulnerability was found in the Linux kernel's netfilter subsystem, where a use-after-free vulnerability was identified in the fl_walk() function of the Flower traffic classifier, this issue arises because the function, which iterates over filters, no longer retains proper RCU protection leading to potential use-after-free.

This vulnerability is classified as moderate in severity. It is a use-after-free type, where the lack of proper synchronization leads to potential access of freed memory, it requires specific conditions to be exploited

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.