Linux Kernel Double Free Vulnerability in MTD Raw NAND Subsystem

A double free vulnerability has been identified in the Linux kernel's MTD raw NAND subsystem, specifically within the Atmel PMECC (Error Correction Code) handling function. The issue arises because the 'user' pointer, which was originally allocated using kzalloc(), was changed to be allocated by devm_kzalloc(). This modification creates a scenario where calling kfree(user) results in a double free condition, potentially leading to memory corruption or other unintended consequences.

Impact

Exploitation of this vulnerability could lead to a double free condition, causing memory corruption. In general, double free vulnerabilities can be exploited to manipulate memory management, potentially leading to arbitrary code execution or other severe consequences.