Threats tagged 'ghsa-hrqp-97p2-7mmr'

A use-after-free vulnerability was identified and fixed in the Linux kernel's wcn36xx WiFi driver related to the teardown of the TX acknowledgment timer. The issue arises because timer_delete() does not wait for a running timer callback to complete, potentially allowing the callback to access freed memory. The fix replaces timer_delete() with timer_shutdown_sync(), which waits for any running callbacks to finish before proceeding, preventing use-after-free conditions.