Linux Kernel Use-After-Free Vulnerability in cx23885 PCI Driver

A use-after-free vulnerability has been identified in the Linux kernel's cx23885 PCI driver. This issue arises in the error handling of the cx23885_initdev() function. When the driver fails to set the DMA mask, it inadvertently leads to a use-after-free condition. The vulnerability occurs because the driver initializes I2C-related resources in the cx23885_dev_setup() function but fails to release them during error handling. As a result, this oversight causes a read of freed memory, which can be exploited.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, allowing for potential memory corruption.