Threats tagged 'ghsa-5frw-42jx-47v6'

CVE-2024-49981 is a use-after-free vulnerability in the Linux kernel's media subsystem, specifically in the venus driver. It arises from a race condition during the removal of the venus device, where asynchronous work may still be executing while the device is being freed. This can lead to use of freed memory and potential system compromise. The issue is fixed by canceling the pending work in the venus_remove function.