Linux Kernel Double Free Vulnerability in GPIO Reset Auxiliary Device Handling

A double free vulnerability has been identified in the Linux kernel's GPIO reset auxiliary device management. When the function '__auxiliary_device_add()' fails, the 'reset_add_gpio_aux_device()' function calls 'auxiliary_device_uninit(adev)'. However, the device release callback 'reset_gpio_aux_device_release()' already frees 'adev', leading to a double free situation when the error path calls 'kfree(adev)' again. This vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability leads to a double free condition, which can potentially be exploited to execute arbitrary code or cause a denial-of-service by crashing the system.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree to address this vulnerability.