Threats tagged 'ghsa-2qvg-p8g6-fm8w'

A use-after-free vulnerability was identified in the Linux kernel's ACPI bus subsystem related to obtaining the first physical device associated with an ACPI device. The existing function acpi_get_first_physical_node() could return a stale device pointer due to a race condition involving device unbinding. This could lead to a use-after-free if the returned pointer is used. A new function, acpi_bus_get_primary_device(), was introduced to safely obtain the primary physical device with proper reference counting, preventing this issue. No intentional functional impact was reported.