Linux Kernel Use-After-Free Vulnerability in SMC CLC Prefix Handling

A use-after-free vulnerability has been identified in the Linux kernel's handling of SMC CLC prefixes. This issue arises in the 'smc_clc_prfx_set' function, which is called during the connection process without proper synchronization, potentially leading to the use of a freed memory reference. The vulnerability has been addressed by modifying the function to use '__sk_dst_get()' and 'dst_dev_rcu()' under a read-side RCU lock, ensuring safe access to network device information. The change prevents the use-after-free condition by correctly managing the lifecycle of the referenced data.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, allowing for memory corruption and potentially arbitrary code execution.

Remediation

Users can upgrade to the patched version of the Linux kernel available in the Linux Kernel Stable Tree.