Threats tagged 'ghsa-cr94-3ppf-3v5m'

A vulnerability in the Linux kernel's dma-buf dma-heap subsystem allowed file descriptors (fd) to be published before a critical copy_to_user() operation succeeded. This could lead to fd and dma-buf reference leaks visible to other threads within the same process if the copy_to_user() failed. The issue was fixed by restructuring the allocation path to ensure fd publication only occurs after a successful copy_to_user(), preventing leaks and unsafe fd operations.