Threats tagged 'ghsa-hmph-x79p-jwjq'

A use-after-free vulnerability exists in the Linux kernel's HID driver for the MCP2221 device. The vulnerability occurs because the driver does not clear a buffer pointer after an I2C/SMBus transfer completes, potentially allowing device data to be copied into freed memory. This can lead to memory corruption with high impact on confidentiality, integrity, and availability. The issue affects specific Linux kernel versions listed. The vulnerability has been resolved by ensuring the buffer pointer is cleared after transfer completion.