Threats tagged 'ghsa-cx8j-9h8g-m439'

CVE-2024-39495 is a use-after-free vulnerability in the Linux kernel's greybus subsystem. It arises from a race condition where a work item referencing an interface object may execute after the object has been freed during cleanup. This can lead to memory corruption and potentially allow an attacker with local privileges to cause denial of service or escalate privileges. The issue is fixed by canceling the scheduled work before freeing the interface object.