Linux Kernel Use-After-Free Vulnerability in Block Layer

A use-after-free vulnerability has been identified in the Linux kernel's block layer, specifically within the block multi-queue (blk-mq) subsystem. This issue arises when a cached request is peeked and the task is set to sleep before the request is popped. In this scenario, the plug flushes and calls 'blk_mq_free_plug_rqs', which frees the cached requests, leading to a use-after-free condition. The vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability creates a use-after-free condition, which can lead to memory corruption and potentially allow for arbitrary code execution.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.