CVE-2024-44946 is a use-after-free vulnerability in the Linux kernel's KCM (Kernel Connection Multiplexor) subsystem. It occurs when concurrent threads call kcm_sendmsg() on the same socket, leading to a double-free of a socket buffer (skb) in the write queue. The flaw arises because one thread can free an skb that another thread is still using, causing memory corruption. The issue was reported by syzkaller and fixed by serializing kcm_sendmsg() calls with a per-socket mutex to prevent concurrent access.