Linux Kernel UAF Vulnerability in dm Cache Target

A use-after-free vulnerability has been identified in the Linux kernel's dm cache target component. This issue arises when the dm_resume() and dm_destroy() functions are executed concurrently, leading to a race condition. The vulnerability has been addressed by modifying the destroy() function to cancel a scheduled timer, thereby preventing the use-after-free scenario.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.

Reproduction

The vulnerability can be reproduced by creating a scenario where dm_resume() and dm_destroy() are called at the same time, causing a race condition that the use-after-free vulnerability exploits.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.