Linux Kernel mac80211 Use-After-Free Vulnerability in ieee80211_scan_rx

A use-after-free vulnerability has been identified in the Linux kernel's mac80211 component, specifically within the ieee80211_scan_rx() function. This vulnerability arises because ieee80211_scan_rx() accesses scan_req->flags after performing a null check, leading to a use-after-free condition. The issue occurs when a scan is completed, and __ieee80211_scan_completed() is executed, which frees the scan_req. To address this, the function should ensure that scan_req is not accessed from an RCU read critical section before calling cfg80211_scan_done().

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.