Linux Kernel DRBD Use-After-Free Vulnerability in Connection Management

A use-after-free vulnerability has been identified in the Linux kernel's DRBD (Distributed Replicated Block Device) module. The issue arises in the 'drbd_create_device()' function, where the 'drbd_destroy_connection()' function frees the 'connection' object. This improper management of memory can lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption. The vulnerability has been addressed by modifying the code to use a safer iterator that prevents such memory management errors.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, allowing for memory corruption or arbitrary code execution.