Linux Kernel iSCSI Connection Removal Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's SCSI iSCSI implementation. This issue arises in the qla4xxx driver when a connection is not removed before the session, leading the iSCSI class to attempt connection removal. The improper handling results in a use-after-free condition, as the 'iscsi_remove_conn()' function frees the connection that is still being referenced.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, which can commonly be exploited to execute arbitrary code or cause a denial-of-service by crashing the system.