Linux Kernel Wi-Fi Subsystem Use-After-Free Vulnerability in Wiphy Management

A use-after-free vulnerability has been identified in the Linux kernel's Wi-Fi subsystem, specifically within the management of 'wiphy' structures. The issue arises because 'wiphy_work' can be queued as soon as the 'wiphy' is allocated and initialized. If 'wiphy_free' is called before the queued work has a chance to execute, the memory associated with 'wiphy' is freed prematurely. When the work eventually runs, it attempts to access invalid memory, leading to potential instability or exploitation.

Impact

Exploitation of this vulnerability can result in a use-after-free condition, which may be exploited to execute arbitrary code or cause a denial-of-service by crashing the system.