Threats tagged 'ghsa-9x8r-8wjj-jgjv'

A use-after-free race condition in the Linux kernel's reboot subsystem involving the cad_pid pointer was resolved. The vulnerability arises because cad_pid, a kernel-wide struct pid pointer, was accessed without proper lifetime protection, allowing a concurrent writer to free the referenced struct pid while it was still in use. This could lead to kernel memory corruption. The issue was partially mitigated by moving cad_pid to the global reboot sysctl table but required further fixes to treat cad_pid as an RCU-protected pointer and properly synchronize reference dropping. The vulnerability affects specific Linux kernel versions and was fixed by implementing RCU protection and grace period waits on the pointer. No known exploits in the wild have been reported.