Linux kernel bug fix: tcp: allocate tcp_death_row outside of struct netns_ipv4
Subsystem: networking/ipv4 (net/ipv4/inet_timewait_sock.c)
Bug type: use-after-free, severity: high
Keywords: refcount;use after free
Files changed: include/net/netns/ipv4.h;net/dccp/minisocks.c;net/ipv4/inet_timewait_sock.c;net/ipv4/proc.c;net/ipv4/sysctl_net_ipv4.c;net/ipv4/tcp_ipv4.c;net/ipv4/tcp_minisocks.c;net/ipv6/tcp_ipv6.c
Introduced by Eric Dumazet on 2022-01-25 11:25:21 +0000; fixed by Eric Dumazet on 2022-01-26 19:00:31 -0800 (lifetime: 1 days)