Linux Kernel PCI Power Control Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's PCI power control subsystem. This issue arises when outstanding rescan work is not properly canceled before unregistering a pwrctrl driver, potentially leading to memory management errors. The vulnerability can be exploited by forcing the rescan work function to run for an extended period, while simultaneously unloading the pwrctrl driver.

Impact

Exploitation of this vulnerability can lead to use-after-free conditions, which may be exploited to execute arbitrary code or cause a denial-of-service by crashing the system.