kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition

A use-after-free flaw was identified in the Linux kernel’s media tuner xc5000 driver. In the vulnerable code path, xc5000release calls canceldelayedwork to cancel a pending delayed work item timersleep without guaranteeing that the work handler has fully completed. Under a race condition, the...

kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition

A use-after-free flaw was identified in the Linux kernel’s media tuner xc5000 driver. In the vulnerable code path, xc5000release calls canceldelayedwork to cancel a pending delayed work item timersleep without guaranteeing that the work handler has fully completed. Under a race condition, the...