Threats tagged 'ghsa-8hhg-gc4j-p2q8'

A vulnerability in the Linux kernel's NFSv4.1 implementation involves uninitialized memory usage in the handling of referring call lists. Specifically, decode_cb_sequence_args() allocates memory without zeroing it, leading to potential use of stale data when freeing memory. This flaw has been resolved by changing the allocation to zero-initialize the memory, preventing stale pointer dereferences.