Linux Kernel Peak USB Use-After-Free Vulnerability in CAN Subsystem

A use-after-free vulnerability has been identified in the Linux kernel's CAN subsystem, specifically within the peak_usb component. This issue arises after the function peak_usb_netif_rx_ni is called, as it becomes unsafe to dereference the socket buffer (skb). The vulnerability occurs because the can_frame, which shares memory with the skb, is accessed after the skb has been freed. Reordering the code execution resolves this problem.

Impact

Exploitation of this vulnerability could lead to memory corruption issues, potentially allowing for arbitrary code execution or causing a system crash.