Linux Kernel Use-After-Free Vulnerability in DRM MSM Component

A use-after-free vulnerability has been identified in the Linux kernel's DRM MSM (Direct Rendering Manager Mobile Subsystem) component. This issue arises because the bridge counter is not reset when the DRM device is torn down, leading to stale pointers accessing deallocated structures during subsequent teardown processes. This vulnerability can be exacerbated by multiple probe deferrals, potentially corrupting data beyond the bridge array. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, allowing for the manipulation of deallocated memory, which could be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users can upgrade to the latest stable version of the Linux kernel to address this vulnerability.