USB/IP Teardown Race Can Rearm a Freed Linux Kernel Timer
A Linux USB/IP timer can restart after device teardown has begun, leaving the kernel callback able to use a virtual controller that has already been freed.LinuxSecurity – Security ArticlesRead More