Threats tagged 'ghsa-p59v-m859-4ppq'

A use-after-free vulnerability in the Linux kernel's HID driver for the mcp2221 device has been resolved. The issue involved device IO not being properly stopped before hardware teardown during probe failure or device removal, which could lead to a race condition. The fix ensures device IO is quiesced at the start of the cleanup callback and guards the call to stop device IO to avoid spurious warnings. This vulnerability affects specific Linux kernel versions listed and is rated medium severity.