Linux Kernel Double Free Vulnerability in algif_hash Socket Type

A double free vulnerability has been identified in the Linux kernel's crypto subsystem, specifically within the algif_hash socket type. When the accept function is called on an algif_hash socket with the MSG_MORE flag set, and the crypto_ahash_import function fails, the sk2 socket is freed. However, this socket is also freed in the af_alg_release function, leading to a slab-use-after-free error.

Impact

Exploitation of this vulnerability causes a use-after-free error, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.