Threats tagged 'ghsa-mvpx-42x3-8643'

A use-after-free (UAF) vulnerability in the Linux kernel Bluetooth driver (btusb) was resolved. The issue arises because asynchronous cancellation of delayed work does not guarantee that the work has stopped before the associated data is freed, leading to potential dereferencing of freed memory. This occurs during Bluetooth device disconnection and closing operations. The fix involves using synchronous cancellation of delayed work and reordering operations to prevent race conditions.