Linux Kernel Mediatek DRM Private Pointer Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's handling of Mediatek Direct Rendering Manager (DRM) bindings. The issue arises because the pointer to the private DRM data is not set to NULL when an error occurs during the binding process. This oversight leads to a memory access violation, as the shutdown procedure attempts to read from a memory location that has already been freed, causing a kernel memory corruption issue.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, allowing for potential arbitrary memory access and manipulation, which could be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system.