Linux Kernel Intel-ISH HID Driver Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Intel-ISH HID driver of the Linux kernel. This issue arises in the 'ishtp_hid_remove()' function, where 'driver_data' is freed prematurely while the function is still processing HID devices. The early deallocation can lead to accessing invalid memory, causing random system crashes shortly after the driver is removed. The vulnerability occurs because 'hid_destroy_device()' relies on 'driver_data' to turn off the sensor, and freeing it beforehand disrupts proper memory management.

Impact

Exploitation of this vulnerability can lead to a random system crash, caused by accessing freed memory, which disrupts normal operations and can potentially cause data loss or corruption.