Threats tagged 'ghsa-pwf2-cf6j-p6wx'

A use-after-free vulnerability in the ALSA PCM mmap buffer handling in the Linux kernel (linux-azure) has been resolved. The issue arises from a race condition where buffer reallocation and mmap operations are not properly synchronized, leading to stale writable mappings of freed pages. This can be exploited locally for privilege escalation. The vulnerability affects specific linux-azure kernel versions listed and has a CVSS score of 7.8 (high impact).