Linux Kernel Slab-Use-After-Free Vulnerability in Memstick RTSX USB MS Driver

A slab-use-after-free vulnerability has been identified in the Linux kernel's memstick subsystem, specifically within the RTSX USB MS driver. This vulnerability arises when the driver improperly manages memory allocation and deallocation, leading to a use-after-free condition. The issue was discovered during the polling of memory stick cards, where the driver attempted to access freed memory, causing a crash. The vulnerability was introduced in version 6.14.0-rc6 and has been resolved in subsequent updates.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, where the driver accesses memory that has already been freed. This can potentially be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system.