Linux Kernel BIO Throttling Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's block I/O throttling mechanism. When a bio (block I/O) operation is throttled, the BIO_THROTTLED flag is set after the throttling timer is initiated. This can lead to a use-after-free condition if the bio completes before it is submitted, causing a memory access violation. The vulnerability was detected by the Kernel Address Sanitizer (KASAN), which reported a read of freed memory by a process handling I/O operations.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, allowing for potential memory corruption or arbitrary code execution.