Threats tagged 'ghsa-c4v9-hjfq-qw76'

A use-after-free vulnerability in the Linux kernel's smc_rx_splice() function was identified and resolved. The issue arises because DMB buffers allocated with kzalloc() are not page-backed, triggering warnings and preventing proper reference counting when passed to get_page(). This can lead to use-after-free if the memory is released prematurely. The fix involves using folio_alloc() to ensure buffers are page-backed and safe for get_page().