Threats tagged 'ghsa-3f57-g7j5-hj3q'

A use-after-free vulnerability in the Linux kernel's at91_udc USB gadget driver was resolved. The issue occurs because a polled-VBUS timer and work cycle continue to reference a device context (udc) after it has been freed during driver removal or probe failure. This can lead to dereferencing freed memory, causing potential system instability or compromise. The fix involves properly shutting down the timer and work cycle during driver removal and probe failure paths to prevent use-after-free conditions.