Linux Kernel IPv6 Multicast Reference Management Vulnerability

A vulnerability in the Linux kernel's IPv6 multicast handling has been addressed. The issue involved improper management of reference counts for multicast data, which could lead to use-after-free errors. Specifically, the problem arose in the 'mld_del_delrec' function, where the reference to the interface's multicast data was released before it was no longer needed, potentially allowing for invalid memory access. This vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability could lead to use-after-free errors, allowing for potential memory corruption or exploitation.

Reproduction

The vulnerability can be reproduced by manipulating multicast data in IPv6, specifically by adding and removing multicast addresses in a way that triggers the 'mld_del_delrec' function. This can be done using network tools that manage multicast addresses, such as 'ip' command-line utility.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.