Threats tagged 'ghsa-7wgc-5744-4jc8'

A race condition vulnerability in the Linux kernel's BPF subsystem was resolved by ensuring synchronization of pending IRQ work before freeing the ring buffer. The issue could cause the irq_work thread to access freed memory if the ring buffer is freed before the queued irq_work executes. This vulnerability was triggered by a BPF program attached to sched_switch that calls bpf_ringbuf_commit(), queuing irq_work. The fix involves calling irq_work_sync() to wait for all pending irq_work to complete before freeing the buffer.