Linux Kernel RDMA/vmw_pvrdma Double Free Vulnerability in User Context Allocation

A double free vulnerability has been identified in the Linux kernel's RDMA vmw_pvrdma driver, specifically in the user context allocation function. This issue arises because the function improperly manages memory by freeing a resource before it is supposed to, leading to potential memory corruption. The vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability could lead to memory corruption issues, which may be leveraged to execute arbitrary code or cause a denial of service by crashing the system.

Reproduction

The vulnerability can be reproduced by triggering an error during the user context allocation process in the vmw_pvrdma driver. This can be done by simulating a failure in the allocation process, which will cause the function to attempt to free a resource that has already been released, resulting in a double free condition.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been fixed.