Threats tagged 'ghsa-7h5m-97m9-x6w8'

CVE-2024-46738 is a use-after-free vulnerability in the Linux kernel's VMCI subsystem. The flaw occurs in the vmci_resource_remove() function when removing a resource from the vmci_resource_table. Due to the possibility of multiple resources having the same handle but different types, the function may free a resource while leaving a dangling pointer in the resource table. This can lead to memory corruption and potential escalation of impact. The vulnerability has a CVSS score of 7.8 (high severity).