Threats tagged 'ghsa-mr7m-3g53-q257'

CVE-2024-50047 is a use-after-free vulnerability in the Linux kernel's SMB client implementation affecting asynchronous decryption operations. The flaw causes a crash due to improper handling of cryptographic transform objects (TFM) when performing large reads with async decryption. The issue arises because the same TFM is used concurrently, leading to a slab-use-after-free error in the crypto API. The vulnerability has been fixed by allocating a separate AEAD TFM for asynchronous operations while retaining the existing one for synchronous reads.