Threats tagged 'ghsa-fhp6-cw2v-3rqj'

A race condition in the Linux kernel's usb gadget u_ether driver between gether_disconnect() and eth_stop() can cause a NULL pointer dereference leading to a kernel crash and a hardlockup. The issue arises because eth_stop() accesses a cleared endpoint descriptor while gether_disconnect() is tearing down endpoints. The fix involves moving the clearing of dev->port_usb to the start of gether_disconnect() to prevent eth_stop() from accessing invalid memory.