Source mapping identifies reading hash->tuple.dst.dir in nf_ct_tuplehash_to_ctrack(), called by gc_worker() during its RCU-protected conntrack hash traversal.
The supplied tuple-hash pointer is 0x10000, read fault at 0x10037.
- Bug#1149525: linux-image-7.2.6+deb14-arm64: 7.2.6 and 7.2... Philip Dodd
- Bug#1149525: Can be reproduced in 7.2.9 Orange SpyderMan
- Bug#1149525: Can be reproduced in upstream 7.2.9 (co... Orange SpyderMan
- Bug#1149525: Orange SpyderMan
