Linux Kernel Btrfs Subsystem Use-After-Free Vulnerability in Bio Repair Process

A use-after-free vulnerability has been identified in the Linux kernel's Btrfs subsystem. This issue arises during the bio repair process, where the bio cleanup can interfere with the bio's end-of-IO handling. The vulnerability can lead to various bugs, including use-after-free errors and NULL pointer dereferences, by creating a race condition between the bio cleanup and the endio function that is supposed to manage the bio's lifecycle. The vulnerability affects several different versions and/or ranges of the Linux kernel.

Impact

Exploitation of this vulnerability can cause use-after-free errors and NULL pointer dereference bugs, leading to memory corruption and potential arbitrary code execution.