Threats tagged 'ghsa-r8g8-vw6g-m8xh'

A double-free vulnerability in the Linux kernel's ieee802154 hwsim driver was fixed by serializing pib updates. The issue arises because hwsim_update_pib() performs an unserialized read-swap-free operation on phy->pib, which can race when called without the RTNL lock, leading to double-free and potential kernel memory corruption. The fix adds a lock to struct hwsim_phy and makes the pointer swap atomic.