In the Linux kernel, the following vulnerability has been resolved:
tomoyo: fix UAF write bug in tomoyowritecontrol()
Since tomoyowritecontrol() updates head->writebuf when write() of long lines is requested, we need to fetch head->writebuf after head->io_sem is held. Otherwise, concurrent write() requests can cause use-after-free-write and double-free problems.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26622.json",
"cna_assigner": "Linux"
}