Linux Kernel DPAA2 Ethernet Invalid Virtual Address Use Vulnerability

A vulnerability in the Linux kernel's DPAA2 Ethernet driver can lead to a use-after-free issue. The vulnerability arises because the TCP Segmentation Offload (TSO) header was DMA-unmapped before the virtual address was retrieved, resulting in an invalid address being used in a memory deallocation call. This issue has been addressed by modifying the order of operations to retrieve the virtual address before unmapping the DMA.

Impact

Exploitation of this vulnerability can cause a kernel paging request error, indicating a use-after-free condition that could potentially be exploited to execute arbitrary code in the kernel context or cause a denial-of-service condition by crashing the system.