glibc: mq_notify does not handle separately allocated thread attributes

The mqnotify function in the GNU C Library aka glibc has a use-after-free. It may use the notification thread attributes object passed through its struct sigevent parameter after it has been freed by the caller, leading to a denial of service application crash or possibly unspecified other impact...

PT-2021-5558

Name of the Vulnerable Software and Affected Versions glibc versions 2.32 and 2.33 Description The issue is related to the mq notify function in the GNU C Library, which has a use-after-free problem. This occurs when the function uses the notification thread attributes object, passed through its...