Threats tagged 'ghsa-22cg-3qr6-xx65'

A use-after-free vulnerability in the Linux kernel's hardware random number generator (hwrng) core was fixed. The issue occurs when the registration of a new RNG device fails after it has been added to the global list but before completion, leaving a dangling reference. This can lead to memory corruption if the caller frees the RNG object after a failed registration.