Linux Kernel UAF Vulnerability in HFSC Class with Netem Child Qdisc

A use-after-free vulnerability has been identified in the Linux kernel's scheduling component, specifically within the Hierarchical Fair Service Curve (HFSC) class when it has a Netem child queue discipline. The issue arises because HFSC incorrectly assumes that a check for the queue length being zero guarantees that the class has not been inserted into the virtual tree or event tree. This assumption fails in cases where Netem creates a duplicate. The vulnerability allows for improper management of class entries, potentially leading to memory corruption or exploitation.

Impact

Exploitation of this vulnerability could lead to memory corruption, allowing for potential arbitrary code execution or causing a denial-of-service condition by disrupting normal kernel operations.