Linux Kernel SCSI ZFCP Double Free Vulnerability in FSF Request Handling

A double free vulnerability has been identified in the Linux kernel's SCSI ZFCP component. This issue arises in versions of the kernel that handle FSF requests. The vulnerability is caused by using an incorrect integer type to cache the FSF request ID, leading to mismatches when the ID is truncated or sign-extended. This flaw can result in a double free condition, where the same memory is freed twice, causing potential memory corruption.

Impact

Exploitation of this vulnerability leads to a double free condition, causing memory corruption. This can result in various stack corruption issues, such as list_del corruption, which has been observed in practice.