Linux Kernel SCSI Target UAF Vulnerability in TCMU Component

A use-after-free vulnerability has been identified in the Linux kernel's SCSI target component, specifically within the TCMU (TCM Userspace) module. The issue arises in the function 'tcmu_try_get_data_page()', which retrieves page references under a lock but fails to properly manage reference counts. This oversight allows the returned page to be freed by 'tcmu_blocks_release()' before it can be safely used, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability could result in a use-after-free condition, allowing for memory corruption or arbitrary code execution.