Linux Kernel FunctionFS Use-After-Free Vulnerability in File Handling

A use-after-free vulnerability has been identified in the Linux kernel's FunctionFS component, specifically within the file handling operations. This issue arises because the file opening process can overlap with the removal of files, leading to a situation where the private data of a file points to a freed object. The vulnerability is present in the FunctionFS implementation of the USB gadget subsystem.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, allowing for potential arbitrary memory access or manipulation.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for upgrading the kernel can be found in the official Linux documentation.