Linux Kernel SCSI LPFC Use-After-Free Vulnerability in Node List Handling

A use-after-free vulnerability has been identified in the Linux kernel's SCSI LPFC driver. This issue arises in the 'dev_loss_tmo_callbk' function, where a node list reference can be improperly accessed after it has been freed. The vulnerability may occur during driver unloading or when managing fatal errors. The problem has been addressed by reorganizing the code to prevent the use-after-free condition, ensuring that node list references are properly managed.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for memory corruption or arbitrary code execution.