Threats tagged 'ghsa-h2g5-mxp5-qrcx'

CVE-2025-22020 is a high-severity use-after-free vulnerability in the Linux kernel's memstick rtsx_usb_ms driver. It involves a slab-use-after-free error in the rtsx_usb_ms_drv_remove function, which can cause kernel crashes. The flaw was detected by Kernel Address Sanitizer (KASAN) and relates to improper memory handling during device removal. This vulnerability affects local privilege levels and can impact confidentiality, integrity, and availability of the system.