Linux Kernel iwlwifi Sub-Driver Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's iwlwifi component, specifically within the MLD (Multi-Link Device) sub-driver. The issue arises in the 'iwl_mld_remove_link' function, where a 'link' is freed using 'kfree_rcu' and then immediately dereferenced to access 'link->fw_id'. This sequence creates a risk of accessing freed memory, potentially leading to undefined behavior. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, allowing for memory corruption or arbitrary code execution.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is available in the Linux kernel stable tree.