Threats tagged 'ghsa-6vjc-f3pw-3x6w'

A NULL pointer dereference vulnerability was identified and fixed in the Linux kernel's s390/vfio-ap driver. The issue occurs during the creation of a sysfs attribute group in vfio_ap_mdev_probe_queue(), where the queue's driver data is not yet set. Concurrent reads of the 'status' attribute can lead to a NULL pointer dereference, causing potential kernel crashes. The fix involves acquiring update locks before creating the sysfs group to prevent concurrent access to uninitialized data.