Threats tagged 'ghsa-hjw3-qcfv-9g4p'

A use-after-free vulnerability in the Linux kernel's USB gadget audio driver (u_audio) was fixed. The issue occurred when the sound card was disconnected and the underlying context was freed while ALSA control elements remained open in userspace. This caused callbacks to dereference freed memory, leading to memory corruption. The fix defers destruction of the context until all references are released.