Threats tagged 'ghsa-48cq-p2fm-8444'

A use-after-free vulnerability in the Linux kernel's TCP implementation was fixed in the do_tcp_getsockopt function when handling TCP_CONGESTION. The flaw involved reading a pointer to congestion control operations without proper synchronization, which could lead to accessing freed memory. The issue was addressed by adding appropriate locking and memory access annotations to prevent concurrent use-after-free and data races.