Threats tagged 'ghsa-rqqp-4vhv-fqrg'

CVE-2024-41057 is a high-severity use-after-free vulnerability in the Linux kernel's cachefiles subsystem. It occurs in the function cachefiles_withdraw_cookie(), where a freed volume object may be accessed, leading to a slab-use-after-free error. The issue arises due to improper ordering of cache withdrawal and volume withdrawal operations, which can cause kernel memory corruption. The vulnerability was identified through fault injection stress testing and has been fixed by reordering operations to ensure volume withdrawal completes before object withdrawal. This prevents use-after-free by waiting for all cookie lookups to complete before freeing the volume.