Threats tagged 'ghsa-x57x-cxmg-52pw'

A use-after-free (UAF) vulnerability was identified and resolved in the Linux kernel's Bluetooth USB driver (btusb). The issue occurs in the btusb_disconnect function where the driver releases an interface and frees associated data, but subsequently accesses that freed data, leading to a UAF condition. This vulnerability could allow an attacker with local privileges to cause memory corruption with high impact on confidentiality, integrity, and availability. The fix involves reordering the cleanup code to avoid accessing freed memory.