Threats tagged 'ghsa-w8w5-45x4-qwqp'

CVE-2025-38209 is a use-after-free vulnerability in the Linux kernel's nvme-tcp driver. It occurs when the second attempt to configure the admin queue fails but does not properly remove the admin tag set, leading to a slab-use-after-free bug triggered by a timeout handler accessing freed memory. This flaw can cause kernel crashes or potentially allow privilege escalation.