Threats tagged 'ghsa-4mm4-rvx3-h58h'

CVE-2024-46858 is a use-after-free (UAF) vulnerability in the Linux kernel's Multipath TCP (mptcp) path manager. The flaw arises from a race condition between two CPU paths accessing the mptcp_pm_del_add_timer function, leading to potential memory corruption. The issue is caused by improper handling of timer references and list operations outside of the protection of a lock, resulting in a UAF scenario.