Threats tagged 'ghsa-grf9-28h9-xvhf'

CVE-2024-50059 is a use-after-free vulnerability in the Linux kernel's ntb_hw_switchtec driver. The flaw occurs during module removal when a race condition allows a work item to access freed memory, potentially leading to system compromise. The issue arises because the work is not canceled before freeing the associated memory in switchtec_ntb_remove. The vulnerability has a high severity with a CVSS score of 7.0. A fix involves canceling the work before cleanup to prevent use-after-free.