Linux Kernel Use-After-Free Vulnerability in DRM XE Migration Restore

A use-after-free vulnerability has been identified in the Linux kernel's DRM XE component, specifically within the SR-IOV packet handling. This issue arises when an error occurs during the migration restore process, as the data pointer is not properly reset to NULL. Consequently, this oversight can lead to a use-after-free condition in subsequent write operations. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, which may be exploited to execute arbitrary code or cause a denial-of-service by crashing the system.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux Kernel Archives.