Threats tagged 'ghsa-fhjf-w34g-fcvp'

CVE-2024-58034 is a use-after-free (UAF) vulnerability in the Linux kernel's tegra20-emc driver. The flaw arises from improper handling of device node references in the tegra_emc_find_node_by_ram_code() function, which releases device nodes while they are still in use. This issue has been fixed by revising the code to correctly traverse device nodes using safer macros. The vulnerability has a high severity with a CVSS score of 7.8.