Description: net/sched: act_ct: fix skb leak and crash on ooo frags
References:
Notes:
 carnil> Introduced in b57dc7c13ea9 ("net/sched: Introduce action ct"). Vulnerable
 carnil> versions: 5.3-rc1.
Bugs:
upstream: released (6.8-rc1) [3f14b377d01d8357eba032b4cabc8c1149b458b6]
6.7-upstream-stable: released (6.7.2) [f5346df0591d10bc948761ca854b1fae6d2ef441]
6.6-upstream-stable: released (6.6.14) [73f7da5fd124f2cda9161e2e46114915e6e82e97]
6.1-upstream-stable: released (6.1.75) [0b5b831122fc3789fff75be433ba3e4dd7b779d4]
5.10-upstream-stable: needed
4.19-upstream-stable: N/A "Vulnerable code not present"
sid: released (6.6.15-1)
6.1-bookworm-security: released (6.1.76-1)
5.10-bullseye-security: needed
4.19-buster-security: N/A "Vulnerable code not present"