Threats tagged 'ghsa-9qj4-wr4g-7m6f'

A vulnerability in the Linux kernel futex subsystem related to the CLONE_THREAD requirement for private default hash allocation has been resolved. The issue involved incorrect assumptions about concurrency when sharing memory mappings (mm) in ways other than pthread semantics, leading to use-after-free bugs. This could cause kernel memory corruption and crashes. The vulnerability has been addressed by loosening the check to cover any CLONE_VM clone except vfork, preventing the race conditions. Red Hat has released security updates for Red Hat Enterprise Linux 9 and 10 to fix this issue. The updates require system reboot to take effect.