Ubuntu kernel update includes MultiSound driver CVE-2017-9986
A local attacker could crash the system or possibly run code via a Turtle Beach audio driver race.
36
Vulnerability2 · 1 read
CVE-2022-49114
- CVSS 3.1
- 8.8 high
- EPSS
- <1%p29
- Published
- ·
- Modified
Description · NVD
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference count. When the reference count reaches zero, it is freed. But ep is still used in the following code, which will lead to a use after free. Return after the fc_exch_release() call to avoid use after free.