Linux Kernel Use-After-Free Vulnerability in at76c50x Wi-Fi Driver

A use-after-free vulnerability has been identified in the Linux kernel's at76c50x Wi-Fi driver. The issue arises because the memory referenced by 'priv' is deallocated at the end of the 'at76_delete_device' function. However, the code subsequently accesses the 'udev' field of the freed object to manage the USB device, potentially leading to a memory leak of the USB device. This vulnerability has been addressed by modifying the code to use 'udev' from the interface instead.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, allowing for potential memory corruption. This type of vulnerability can often be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system.