Linux Kernel Use-After-Free Vulnerability in CAN Protocol VXCAN Component

A use-after-free vulnerability has been identified in the Linux kernel's CAN protocol implementation, specifically within the VXCAN component. The issue arises in the 'vxcan_xmit' function, where the 'netif_rx_ni' function is called to receive a socket buffer (skb). This operation creates a race condition, as the 'canfd_frame' (cfd) that references the skb memory is accessed after it has been freed, leading to potential memory corruption.

Impact

Exploitation of this vulnerability could result in memory corruption, potentially allowing for arbitrary code execution or other unintended behavior.