CVE-2024-41644.yaml

CVE-ID: CVE-2024-41644
PROGRAM: ros-planning navigation2
PACKAGE: nav2_amcl
VERSION: ['humble','iron']
BUG-TYPE: use-after-free
DESCRIPTION: Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.
DETAIL: This vulnerability is triggerd because of a data-race between function `dynamicParametersCallback` and `on_cleanup`