Threats tagged 'ghsa-g5h6-rr2f-33x7'

A use-after-free vulnerability in the Linux kernel's hwmon gpio-fan driver was resolved. The issue involved the fan_alarm_irq_handler() queuing work that could run after the associated fan_data and hwmon device were freed, leading to potential use-after-free conditions. The fix replaced INIT_WORK() with devm_work_autocancel() to ensure proper cancellation of queued work during device unbinding.