Linux Kernel mac80211 Channel Context Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's mac80211 wireless networking component, specifically within the channel context management code. The issue arises in the function 'ieee80211_vif_use_reserved_context()', where an old channel context can be freed while still being referenced. This occurs when the new context's replace state is set to 'IEEE80211_CHANCTX_REPLACE_NONE', allowing the old context to be released but not properly nullified, leading to potential access of freed memory.

Impact

Exploitation of this vulnerability could lead to memory corruption, allowing for arbitrary code execution or causing a system crash.