Threats tagged 'ghsa-xqqx-xhmm-5h73'

A Use-After-Free vulnerability in the Linux kernel's USB gadget function f_fs was fixed. The flaw occurred in asynchronous I/O (AIO) error handling where a race condition could lead to accessing freed memory. This was addressed by properly un-arming the cancellation handler to prevent concurrent access to freed pointers.