Threats tagged 'ghsa-m9m2-8mh5-2h2v'

CVE-2024-39506 is a medium severity vulnerability in the Linux kernel's liquidio driver involving improper NULL pointer handling in the lio_vf_rep_copy_packet function. The function compares a pointer to NULL but then unconditionally passes it to skb_add_rx_frag(), which could lead to a NULL pointer dereference and cause a denial of service. The issue has been identified and resolved by adjusting the code to conditionally call skb_add_rx_frag().