Threats tagged 'ghsa-x7mx-xj8x-r7p3'

CVE-2024-42285 is a high-severity use-after-free vulnerability in the Linux kernel's RDMA iwcm component. It involves improper handling of connection management IDs (CM IDs) where the kernel could free memory prematurely, leading to potential memory corruption. The flaw occurs because the rdma_destroy_id() function frees both the CM ID and its associated private structure without ensuring all pending work has completed, risking use-after-free in the cm_work_handler().