Threats tagged 'ghsa-7jm9-29fh-9vrx'

A vulnerability in the Linux kernel's USB gadget function (f_ecm) involves improper cleanup after a bind/unbind cycle, leading to a NULL pointer dereference. This occurs because a stale notify request is freed incorrectly if a subsequent bind fails. The issue has been addressed by refactoring the error handling to use an automatic cleanup mechanism.