Linux Kernel Workqueue Use-After-Free Vulnerability in Rescuer Detachment

A use-after-free vulnerability has been identified in the Linux kernel's workqueue implementation. This issue arises when the rescuer is detached from the pool, leading to a premature release of a reference, which can be exploited. The vulnerability was introduced by a commit that reaped normal workers but failed to properly manage the rescuer, removing the necessary synchronization that prevented the use-after-free condition.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, which can commonly result in arbitrary code execution or memory corruption.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.