Linux Kernel UAF Vulnerability in dma_buf_fd() Tracepoint

A use-after-free vulnerability has been addressed in the Linux kernel's dma-buf subsystem. This issue arises in the dma_buf_fd() function, where the file descriptor (fd) can be closed by a thread before the DMA_BUF_TRACE() macro is executed. This race condition leads to a slab-use-after-free scenario, as the tracepoint attempts to access the dma_buf after it has been freed. The vulnerability affects the Linux kernel stable tree, specifically in version 7.0.x.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, causing a memory corruption issue that could be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree to address this vulnerability.