Linux Kernel IVPU Driver Recovery Work Queuing Vulnerability During Device Removal

A vulnerability in the Linux kernel's IVPU driver could lead to use-after-free bugs by allowing recovery work to be scheduled even after device removal had begun. This issue has been addressed by changing the recovery work cancellation process to ensure no new recovery tasks can be queued once device removal starts. The vulnerability affects Linux kernel versions 6.8 and later.

Impact

The vulnerability could cause use-after-free bugs by allowing recovery processes to access resources that have already been freed, potentially leading to memory corruption or other unintended behavior.