Threats tagged 'ghsa-fwvg-7877-39cm'

A use-after-free (UAF) vulnerability exists in the Linux kernel's net_sched subsystem, specifically in the hfsc class when it has a netem child qdisc. The issue arises because the code incorrectly assumes that checking the queue length guarantees the class is not inserted twice in internal trees, which is not true for netem duplicates. This flaw can lead to memory corruption and potentially allow an attacker with local privileges to cause a denial of service or escalate privileges. The vulnerability has a high severity score of 7.8 CVSS v3.1.