Threats tagged 'ghsa-qh6f-g265-fmxf'

CVE-2024-50126 is a use-after-free vulnerability in the Linux kernel's taprio_dump() function within the network scheduler code. The flaw was identified on KASAN-enabled arm64 systems and involves improper handling of RCU read-side critical sections, which could lead to memory corruption. This vulnerability has been resolved by adding the appropriate RCU read-side critical section in taprio_dump().