Threats tagged 'ghsa-vp2p-wqj6-25wf'

CVE-2024-49936 is a use-after-free (UAF) vulnerability in the Linux kernel's net/xen-netback component, specifically in the xenvif_flush_hash() function. The issue arises because kfree_rcu is called outside the RCU read critical section during list iteration, potentially causing access to freed memory. This vulnerability has been resolved by changing the iteration method to list_for_each_entry_safe.