Linux Kernel VLAN List Lock Vulnerability in HNS3 Driver

A use-after-free vulnerability has been identified in the Linux kernel's HNS3 network driver. This issue arises when adding port-based VLANs, as it requires removing virtual function (VF) VLANs from hardware and updating the VLAN state in the VF VLAN list. If a periodic task frees the same node simultaneously, it can lead to a use-after-free error. The vulnerability has been addressed by adding a VLAN list lock to protect the VLAN list.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.