Threats tagged 'ghsa-83hh-pj86-jr69'

CVE-2024-41051 is a use-after-free vulnerability in the Linux kernel's cachefiles subsystem. It occurs because the ondemand_object_worker() function can run after the cachefiles_object has been freed, leading to potential memory corruption. The issue arises when an object is dropped but the worker is still queued to reopen it. The fix involves cancelling or waiting for the ondemand_object_worker() to finish when dropping the object.