Threats tagged 'ghsa-pgpc-54gc-3694'

CVE-2024-47712 is a medium severity vulnerability in the Linux kernel's wilc1000 WiFi driver. It involves an improper use of Read-Copy-Update (RCU) synchronization in the function wilc_parse_join_bss_param, where the TSF field of the ies structure is accessed after the RCU read-side critical section has ended. This improper access can lead to unpredictable behavior including potential use-after-free conditions. The issue was identified via static analysis and fixed by storing the TSF value in a local variable before releasing the RCU lock, ensuring safe access.