Linux Kernel virtio-blk Use-After-Free Vulnerability on Suspend/Resume

A use-after-free vulnerability has been identified in the Linux kernel's virtio-blk component. This issue arises during the suspend and resume process, where the virtqueue (vq) is freed on suspend and reallocated on resume. As a result, the user_data in the hardware context (hctx) becomes invalid after resuming, leading to a use-after-free situation. This flaw can cause a kernel crash, as evidenced by a call trace showing the failure occurring during virtqueue operations and file read operations.

Impact

Exploitation of this vulnerability leads to a kernel crash, causing a denial of service by interrupting system operations.