Threats tagged 'ghsa-m8p9-q552-5h79'

CVE-2025-37838 is a use-after-free vulnerability in the ssi_protocol driver of the Linux kernel caused by a race condition during module removal. The vulnerability occurs when work scheduled by the driver continues to access freed memory after the module is unloaded. This flaw has been fixed by ensuring that the scheduled work is canceled before cleanup in the ssi_protocol_remove() function.