Linux Kernel Use-After-Free Vulnerability in CAN Network Stack

A use-after-free vulnerability has been identified in the Linux kernel's CAN (Controller Area Network) subsystem. This issue arises after the function netif_rx_ni is called, as it becomes unsafe to dereference the socket buffer (skb). The vulnerability specifically involves accessing the can_frame structure, which overlaps with the skb memory, after it has been freed. The problem has been addressed by reordering the code to ensure safe memory access.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.