Linux Kernel IPv6 Use-After-Free Vulnerability in Permanent Address Handling

A use-after-free vulnerability has been addressed in the Linux kernel's IPv6 address management. The issue arose in the 'addrconf_permanent_addr' function, where a warning about an exceptional condition was delayed, allowing access to an IPv6 address after it could have been deleted. This vulnerability affects the Linux kernel stable group.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for memory corruption or other unintended behavior.

Reproduction

The vulnerability can be reproduced by triggering the 'addrconf_permanent_addr' function with an IPv6 address marked as permanent. The function will process the address, but if an exceptional condition occurs, it will attempt to delete the address after the warning has already been issued, creating a use-after-free scenario.

Remediation

Users can upgrade to the latest version of the Linux kernel stable group, where this vulnerability has been fixed.