Threats tagged 'ghsa-jgpx-8fg9-hh7j'

CVE-2024-46713 is a high-severity vulnerability in the Linux kernel related to the perf subsystem's AUX buffer serialization. The issue arises because the existing event->mmap_mutex lock is insufficient to properly serialize access to the AUX buffer, potentially leading to race conditions. The fix involves adding a per RB mutex to ensure full serialization of the AUX buffer. This vulnerability affects local attackers with low privileges and requires no user interaction to exploit. The flaw impacts confidentiality, integrity, and availability of the system.