A public proof-of-concept has been released for a use-after-free flaw affecting the Linux kernel’s bridge subsystem, specifically its Spanning Tree Protocol implementation in net/bridge. The issue can leave STP timers active after the bridge network device that owns them has been deleted, creating a dangerous memory-safety condition in the kmalloc-cg-8k slab cache. The use-after-free vulnerability […]
The post Public PoC Released for Linux Kernel Bridge Use-After-Free Vulnerability appeared first on Cyber Security News.