Threats tagged 'ghsa-f255-x52r-mjq5'

A use-after-free vulnerability was identified and resolved in the Linux kernel SMB client code, specifically in the smb2_close_cached_fid() function. The issue involved a race condition where a new reference could be acquired after the reference count dropped to zero but before a lock was obtained, leading to potential use-after-free. The fix involved changing to kref_put_lock() to ensure the release function is called with the appropriate lock held, preventing this race condition.