Threats tagged 'ghsa-6h84-4ch4-64mj'

A use-after-free vulnerability in the Linux kernel's qla2xxx SCSI driver was resolved. The flaw occurs when work scheduled on a workqueue references a qpair that has been freed during queue teardown, leading to potential memory corruption. This is due to the workqueue not being properly flushed after interrupt release and before freeing memory. The issue is fixed by flushing the work item with cancel_work_sync() to ensure no pending work operates on freed memory.