Threats tagged 'ghsa-pq55-ghfc-4495'

CVE-2024-39499 is a vulnerability in the Linux kernel's vmci component where user-controlled event data is used as an index without proper sanitization, potentially leading to speculative information leaks. The issue was identified by static analysis and fixed by sanitizing the event index in the event_deliver() function to prevent speculation-based data leaks.