Linux Kernel Use-After-Free Vulnerability in OMAP2430 USB Driver

A use-after-free vulnerability has been identified in the Linux kernel's USB driver for the OMAP2430 platform. The issue arises in the 'omap2430_probe()' function, where the 'of_node_put(np)' call is made prematurely, before the last access to 'np'. This mismanagement can lead to a use-after-free condition if the reference count of the node drops to zero. The vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.

Reproduction

The vulnerability can be reproduced by probing a USB device using the OMAP2430 driver. The 'of_node_put(np)' function is called before the driver has finished using the device node, which can cause the node's reference count to drop to zero prematurely. This creates a window where the memory can be freed while still in use, leading to a use-after-free condition.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been fixed.