Linux Kernel Ext4 Slab-Use-After-Free Vulnerability in Xattr Handling

A slab-use-after-free vulnerability has been identified in the Linux kernel's ext4 file system, specifically within the xattr (extended attributes) handling. The issue arises in the function 'ext4_xattr_inode_dec_ref_all', where the code fails to properly manage xattr entries that extend beyond the designated 'end' entry. This oversight can lead to the use of freed memory, potentially causing memory corruption or allowing for arbitrary code execution.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, where the system incorrectly accesses memory that has already been freed. This can cause memory corruption, which may be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system.