HackerOne Disclosed Reports - 2025-04-18

High
resolved

sys_fsc2h_ctrl kernel stack free

Bug reported by Andy Nguyen was disclosed at April 18, 2025, 6:40 am   |   Use After Free

The sys_fsc2h_ctrl kernel function can lead to a kernel stack free vulnerability. The vulnerability is caused by a race condition involving multiple threads accessing a local stack buffer. This could potentially result in a privilege escalation.