Threats tagged 'ghsa-jrxv-vv4v-jrrh'

CVE-2025-22035 is a use-after-free vulnerability in the Linux kernel's tracing subsystem, specifically in the print_graph_function_flags function during tracer switching. The flaw occurs because the kernel does not properly nullify a pointer after freeing it, allowing a stale pointer to be used during tracer transitions. This can lead to memory corruption and potentially allow an attacker with local privileges to cause a denial of service or escalate privileges. The issue was discovered during ftrace stress testing and fixed by setting the pointer to NULL immediately after freeing it.