Linux Kernel HFS Filesystem Use-After-Free Vulnerability in CNID Correction Function

A use-after-free vulnerability has been identified in the Linux kernel's HFS filesystem implementation. The issue arises in the 'hfs_correct_next_unused_CNID' function, where a reference count is improperly managed. The function first decreases the reference count of a node and then immediately dereferences it, creating a risk of accessing freed memory. This vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.