Threats tagged 'ghsa-4p23-qfc5-2vc9'

A vulnerability in the Linux kernel's md subsystem was resolved that could cause a kernel panic due to a NULL pointer dereference. The issue involved the function rdev_addable being called in an RCU (Read-Copy-Update) context where the rdev->mddev pointer could be set to NULL before a synchronize_rcu call, leading to a crash. The fix involved using READ_ONCE to safely check the pointer's validity. This vulnerability affects specific Linux kernel versions and has a medium severity rating with an impact on availability.