Threats tagged 'ghsa-m7jg-4wjg-p9fx'

A use-after-free vulnerability in the Linux kernel's usb storage driver for Realtek devices (realtek_cr) has been fixed. The issue occurs because the timer callback can still run and rearm itself after the chip containing the timer is freed during disconnect. The fix involves using timer_shutdown_sync() to wait for the callback and prevent rearming, and initializing the timer earlier to avoid failure path issues.