Threats tagged 'ghsa-32x8-xhwp-vhg9'

CVE-2024-56670 is a use-after-free vulnerability in the Linux kernel's usb gadget u_serial driver. It occurs when multiple threads concurrently access the driver, leading to a null pointer dereference and kernel crash. The issue arises because one thread may set a pointer to NULL during disconnect while another thread attempts to access it without checking for null. A null pointer check was added to prevent this crash.