Threats tagged 'ghsa-grrp-5gxg-cv8j'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.2%	CVE-2024-46746Linux kernel · HID: amd_sfh: free driver_data after destroying hid device High7.8EPSS 0.2%2024-09-18GCVE DatabaseCVE-2024-46746 CVE-2024-46746 is a use-after-free vulnerability in the Linux kernel's amd_sfh HID driver. The flaw occurs because driver data is freed prematurely after calling hid_destroy_device(), while driver callbacks may still access this data, leading to a crash. This issue was observed on kernel version 6.10.0 with KASAN enabled, causing a slab-use-after-free error. The vulnerability has a high severity rating with a CVSS score of 7.8. EPSS 0.2%Vulnerability CWE-416 #ghsa-grrp-5gxg-cv8j	GCVE Database	2024-09-18

Page 1 of 1