Use after free in Android
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.
kpatch-patch security update
Released 2022-04-13 · Red Hat rating Important · View on Red Hat →
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free.
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition.