Linux Kernel USB Gadget Double Free Vulnerability in f_tcm Gadget

A vulnerability in the Linux kernel's USB gadget subsystem, specifically within the f_tcm gadget, has been addressed. The issue was related to improper management of command memory. The vulnerability arose because the command was being freed prematurely, before the status completion of the sense status. This mismanagement could lead to a double free of the command, potentially causing memory corruption.

Impact

Exploitation of this vulnerability could lead to memory corruption due to a double free condition, which can be exploited to manipulate memory management and potentially execute arbitrary code.