Linux Kernel RapidIO API Misuse Vulnerability Leading to Use-After-Free Issue

A vulnerability in the Linux kernel's RapidIO subsystem has been addressed. The issue arose from an API misuse where the function 'rio_add_net()' failed after calling 'device_register()'. This failure necessitated the use of 'put_device()' instead of 'kfree()' to prevent a use-after-free vulnerability. The fix involves setting 'mport->net' to NULL to avoid the memory management issue.

Impact

The vulnerability could lead to a use-after-free condition, potentially allowing for memory corruption or exploitation of the freed memory.