Hi Xiao,
I'm bringing back this old thread to ask if there is any progress on the 
topic?
If I'm correct, this is not yet fixed in upstream, right?

We have multiple issues submitted for multiple systems that we belive 
are related to this behavior.
Redhat backports hotfix for their systems, but the vulnerability is 
still present on other OSes.
Is there a plan to have it resolved in upstream?

Thanks,
Mateusz