An issue was discovered in the Linux kernel before 6.6.8. dovccioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition.
{ "urgency": "not yet assigned" }