Threats tagged 'ghsa-2rf6-4xf4-32wc'

A use-after-free vulnerability in the Linux kernel's NVMe driver was resolved by fixing the lifetime management of the admin request_queue. The issue allowed namespaces to access a stale admin request_queue after the controller was torn down, leading to potential memory corruption. The flaw was identified through a KASAN slab-use-after-free bug report. This vulnerability has been addressed by ensuring the admin request_queue remains active until all references to the controller are released.