CVE-2024-49855

CVE-2024-49855 affects the Linux kernel nbd subsystem, where a race between timeout handling and normal completion could lead to use-after-free. The issue arises when a timed-out request is requeued by nbd_requeue_cmd() and normal completion tries to finish it, risking use-after-free. The documen...

UBUNTU-CVE-2024-26638

In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg-msggetinq value can be uninitialized 1 struct msghdr got many new fields recently, we should always make sure their values is zero by default. 1 BUG: KMSAN...