Linux Kernel Panfrost Driver Use-After-Free Vulnerability in MMU Context Handling

A use-after-free vulnerability has been identified in the Linux kernel's Panfrost graphics driver. This issue arises because the job structure incorrectly references the Panfrost private data to access the Memory Management Unit (MMU) context. If the Panfrost private data has already been freed, this creates a use-after-free condition that can be exploited, leading to a system crash. The vulnerability is present in the Panfrost driver when the MMU context outlives its corresponding private data, allowing for potential exploitation.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, causing a system crash.

Remediation

The vulnerability has been addressed by modifying the job structure to remove the reference to the Panfrost private data and instead directly reference the MMU structure, which is the actual requirement.