Threats tagged 'ghsa-6gx2-28h4-32x9'

CVE-2024-50261 is a use-after-free vulnerability in the Linux kernel's macsec module related to sending offloading packets. The issue arises because metadata_dst, which stores the SCI value for macsec offload, is freed prematurely while still in use, leading to a use-after-free condition detected by KASAN. This flaw has been fixed by changing the release mechanism to avoid immediate freeing if the metadata_dst is still referenced by the socket buffer.