Linux Kernel RCU Protection Vulnerability in ndisc_send_skb()

A vulnerability in the Linux kernel's handling of Network Discovery (ndisc) has been addressed. The issue arose because the function ndisc_send_skb() could be called without the appropriate Real-Time Networking Layer (RTNL) or Read-Copy Update (RCU) protections, potentially leading to a use-after-free (UAF) condition. The vulnerability has been resolved by acquiring the RCU read lock earlier, allowing the use of dev_net_rcu() to avoid the UAF risk.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, which may be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system.