Threats tagged 'ghsa-9ccw-6g9x-96r5'

CVE-2025-23138 is a vulnerability in the Linux kernel involving a pipe accounting mismatch in the watch_queue subsystem. The flaw arises because watch_queue_set_size() modifies pipe buffer counts charged to a user without updating the pipe's internal accounting, leading to potential underflow when the pipe is freed. This can cause certain pipe buffer limit checks to fail incorrectly, resulting in denial of service conditions. The issue has been resolved by explicitly accounting for pipe usage in watch_queue_set_size().