Threats tagged 'ghsa-h3qw-rx4w-h8fj'

A use-after-free vulnerability in the Linux kernel's KVM guest_memfd component was resolved. The issue occurs when unbinding a memslot from a guest_memfd instance while the guest_memfd file is in the process of being released, leading to a write operation on freed memory. This was detected by KASAN as a slab-use-after-free bug. The vulnerability could allow an attacker with local privileges to cause memory corruption with high impact on confidentiality, integrity, and availability.