Threats tagged 'ghsa-r2q9-5f64-27vx'

CVE-2024-50267 is a use-after-free vulnerability in the Linux kernel's USB serial driver for io_edgeport devices. The issue occurs because a debug print statement accesses a freed USB request block (urb) pointer after usb_free_urb() has been called. This flaw has been fixed by storing the device pointer before freeing the urb to avoid accessing freed memory.