Linux Kernel RDMA/srpt Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's RDMA/srpt component. This issue arises from the management of LIO port members within the srpt_port structure, which were originally regular members but have been changed to pointers. The vulnerability occurs because the lifetime of the srpt_port structure, controlled by the RDMA core, is not properly synchronized with the LIO target port, leading to a use-after-free condition. This vulnerability was highlighted by a KASAN (Kernel Address Sanitizer) report, indicating a read of freed memory by a specific task.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, which can commonly result in memory corruption and potentially allow for arbitrary code execution or other unintended behavior in the kernel.