Threats tagged 'ghsa-5w6m-vxmj-7w4c'

A use-after-free vulnerability in the Linux kernel Bluetooth mesh management code was resolved by ensuring the mesh send timer is canceled when the Bluetooth device (hdev) is removed. Failure to cancel this timer could cause a kernel crash if the timer triggers after the device is gone. This issue was observed sporadically in testing and is associated with a KASAN slab-use-after-free bug.