Threats tagged 'ghsa-hx3p-xj26-wxj6'

CVE-2024-36479 is a medium-severity vulnerability in the Linux kernel's FPGA bridge implementation. The issue arises because the bridge code assumes the parent device has a driver and uses its owner pointer to manage module reference counting. If the parent device lacks a driver, this can cause a null pointer dereference, leading to a potential denial of service. The fix involves adding an explicit owner module pointer to the fpga_bridge structure and modifying the bridge registration function to require this owner, preventing null dereferences and improving code clarity.