Threats tagged 'ghsa-mh6m-gjcw-57ph'

CVE-2024-56693 is a use-after-free vulnerability in the Linux kernel's brd (block RAM disk) driver. The issue arises because brd_init() calls brd_alloc() before successfully registering the block device, and on failure, it releases already created disks improperly, leading to use-after-free conditions. This can cause kernel crashes or potentially allow privilege escalation. The flaw was identified through fault injection testing and is related to improper error handling during module initialization.