Threats tagged 'ghsa-65g7-h87v-v85m'

A use-after-free vulnerability in the Linux kernel's KVM subsystem was resolved by disallowing toggling the KVM_MEM_GUEST_MEMFD flag on an existing memory slot. The issue arises when attempts to disable this flag on a memslot initially created with guest_memfd binding are not rejected, leading to improper unbinding and a use-after-free condition. This vulnerability can cause memory corruption and potentially allow privilege escalation or denial of service. The flaw was identified and fixed to prevent such toggling, addressing the root cause rather than just the symptom.