Threats tagged 'ghsa-64xh-4w8v-x8v5'

A vulnerability in the Linux kernel's virtio_console driver was resolved. The issue involved improper freeing of control-out buffers during device removal, leading to out-of-bounds memory reads. Specifically, the remove_vqs() function passed leftover cookies to free_buf(), which incorrectly treated them as port_buffer structures and read beyond the ports_device object. This was detected by KASAN as a slab-out-of-bounds error. The fix ensures that control-out queues are drained without freeing buffers prematurely, preventing invalid memory access.