Threats tagged 'ghsa-79fx-6w6m-964r'

CVE-2024-53173 is a use-after-free vulnerability in the Linux kernel's NFSv4.0 asynchronous open() implementation. It occurs when two threads open files simultaneously and abort before receiving a reply, leading to a use-after-free on an RPC task pointer. This flaw can cause high impact on confidentiality, integrity, and availability. The issue has been fixed by ensuring proper release of sequence IDs before freeing RPC tasks.