Threats tagged 'ghsa-9x2f-7mf8-f579'

A critical vulnerability in the Linux kernel's NVMe Fibre Channel driver (nvme-fc) was resolved by ensuring that the ioerr_work work item is properly cancelled in the nvme_fc_delete_ctrl() function. The flaw involved a race condition where ioerr_work could be queued after cancel_work_sync() was called, leading to use-after-free and kernel list corruption, causing kernel crashes (oops) and invalid opcode exceptions. This vulnerability could result in system instability or denial of service due to kernel panics.