Threats tagged 'ghsa-86fp-6jqc-qg25'

A critical use-after-free vulnerability in the Linux kernel's mptcp_schedule_work() function has been resolved. The issue arises from a race condition where a reference count on a socket can be released prematurely, leading to potential memory corruption. This flaw was reported by syzbot and involves improper ordering of reference count increment and work scheduling. The vulnerability allows for potential complete compromise of confidentiality, integrity, and availability of the affected system.