Threats tagged 'ghsa-68xx-p949-f9wp'

CVE-2024-50186 is a use-after-free vulnerability in the Linux kernel's network socket creation code. It occurs because the socket pointer (sk) is not explicitly cleared when the protocol family create function (pf->create) fails, potentially leaving a dangling pointer. This issue was not fully addressed by a previous fix, as some pf->create implementations do not nullify the pointer on error paths. The vulnerability can lead to high impact including confidentiality, integrity, and availability violations.