Threats tagged 'ghsa-3h24-5m24-pxvw'

CVE-2024-56604 is a use-after-free vulnerability in the Linux kernel's Bluetooth RFCOMM implementation. The issue occurs when rfcomm_dlc_alloc() fails after bt_sock_alloc() has allocated and attached a socket object, leaving a dangling pointer that may be used improperly. This flaw has been fixed by reordering the allocation calls to prevent the dangling pointer.