Linux Kernel UAF Vulnerability in ATM LEC Handling

A use-after-free vulnerability has been identified in the Linux kernel's ATM (Asynchronous Transfer Mode) subsystem, specifically within the /proc/net/atm/lec interface. The issue arises from improper management of device references, where dev_put() calls were made without corresponding dev_hold() calls. This oversight created an imbalance in reference counting, leading to a use-after-free condition.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.