Threats tagged 'ghsa-6m5m-pcmh-qg5r'

A high-severity vulnerability in the Linux kernel's USB gadget function f_rndis has been resolved. The issue involves stale memory references after a bind/unbind cycle, which can lead to a NULL pointer dereference during error handling. This occurs when the system attempts to free a stale request, causing potential kernel crashes or denial of service. The fix refactors the bind path to use an automatic cleanup mechanism to prevent this stale reference.