Linux Kernel Geneve Module Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's Geneve module. The issue arises in the 'geneve_find_dev()' function, where improper management of network device references can lead to memory corruption. This vulnerability occurs when the 'geneve_configure()' function links a Geneve device to a network namespace that may differ from the expected one. If the original network namespace is dismantled, the device can be freed while still being referenced, causing a use-after-free condition when a new Geneve device is created in the same namespace.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, which can commonly result in arbitrary code execution or memory corruption.