In the Linux kernel, the following vulnerability has been resolved:drm/client: Fully protect modes[] with dev->mode_config.mutexThe modes[] array contains pointers to modes on the connectors'mode lists, which are protected by dev->mode_config.mutex.Thus we need to extend modes[] the same protection or by thetime we use it the elements may already be pointing tofreed/reused memory.
No PoCs from references.
- https://github.com/ARPSyndicate/cve-scores