Threats tagged 'ghsa-vprx-6mqf-hg7q'

A use-after-free vulnerability in the Linux kernel's NFS server (nfsd) was fixed by deferring the freeing of compound operation buffers until after an RCU grace period. The issue involved the rpc_status netlink dumpit reading from a vmalloc buffer that could be freed concurrently, causing a use-after-free condition. The fix replaces synchronous freeing with deferred freeing to ensure memory safety.