Linux Kernel Spectre V1 Vulnerability in IP Metrics Conversion

A vulnerability allowing a Spectre v1 attack has been addressed in the Linux kernel. The issue was in the IPv4 metrics conversion function, where the 'type' variable was used as an array index. This could potentially allow CPU speculation to leak kernel memory contents. The vulnerability has been resolved by adding checks to prevent improper array indexing that could be exploited.

Impact

Exploitation of this vulnerability could lead to a Spectre v1 attack, allowing for speculative execution that could leak sensitive kernel memory contents.