Threats tagged 'ghsa-8fp7-88m9-24jc'

A time-of-check to time-of-use (TOCTOU) race condition in the Linux kernel SCTP_CMD_TIMER_START handler could lead to a use-after-free during association teardown. The issue arises because the timer can expire and detach between checking timer_pending() and calling timer_reduce(), causing an unbalanced association reference count. This vulnerability has been resolved in affected Linux Azure kernel versions.