Threats tagged 'ghsa-gc3v-ppv7-rpm9'

CVE-2024-39496 is a high-severity use-after-free vulnerability in the Linux kernel's btrfs zoned code. It occurs due to a race condition between loading zone information during block group creation and a device replace operation. This race can lead to use of a freed device pointer, causing potential system compromise. The issue is fixed by extending the critical section under the device replace read-write semaphore to ensure safe device usage.