Threats tagged 'ghsa-3m6c-788w-h698'

A vulnerability in the Linux kernel's serial core subsystem involves improper ordering of memory allocations during console registration. Specifically, allocations for uport->tty_groups occur after uart_configure_port(), which may register the console. If allocation fails, the driver may unwind the port while the console remains registered, leading to potential NULL dereference and use-after-free conditions in console output drivers. The issue has been resolved by allocating necessary resources before linking and configuring the port.