GHSA-rjh6-h795-3mrj
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: October 5, 2025 6:32 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.