Linux Kernel Race Condition Vulnerability in AMDTEE Component Leading to Use-After-Free

A race condition vulnerability has been identified in the AMDTEE component of the Linux kernel, specifically in the amdtee_open_session function. This vulnerability can lead to a use-after-free condition. The issue arises when the session mask is set, and before the session information is updated. If the amdtee_close_session function closes the same session during this window, the session data structure is released. This premature release can cause a kernel panic when the session is accessed again within the amdtee_open_session function.

Impact

Exploitation of this vulnerability can cause a kernel panic, leading to a denial of service condition by crashing the system.