Threats tagged 'ghsa-f5xx-949w-7ch3'

CVE-2024-41096 is a use-after-free vulnerability in the Linux kernel's PCI/MSI subsystem, specifically in the msi_capability_init function. The flaw occurs when an error path accesses a freed MSI descriptor, leading to a use-after-free read. This vulnerability has a high severity with a CVSS score of 7.8, impacting confidentiality, integrity, and availability. The issue is resolved by copying the descriptor and using the copy during error handling to avoid accessing freed memory.