Linux Kernel Open vSwitch Use-After-Free Vulnerability via Improper RCU Handling

A use-after-free vulnerability has been identified in the Linux kernel's Open vSwitch component. The issue arises in the function 'ovs_vport_cmd_fill_info()', which can be called without proper Real-Time Networking Layer (RTNL) or Read-Copy Update (RCU) synchronization. This vulnerability has been addressed by implementing RCU protection and using 'dev_net_rcu()' to prevent potential use-after-free scenarios.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for memory corruption or arbitrary code execution.